Get results from 'total events yesterday' search.

@mulby @jzoldak @brianhw @rocha 

This is predicated on a saved search in Splunk.

CC @feanil  @e0d 
Ah, I agree with you. Funny since this is the one set of lines I did not touch from Splunk's example. I'll fix.