Grafana Neebie question - count not working

Hi All,
Newbie question, i’m pointing grafana at a elasticsearch DB, being populated by graylog.
I’m trying to get some nice stat graphs out of it, but i can’t get the count function to work.
It is telling me the right parameters like port number (Its logs from a pfsense) but the counts are always 0 even though if i setup a log screen/dashboard i can see there is loads of them.

Any ideas on what i’ve done wrong? or what i need to share to be able to fix the errors of my ways!

Thanks

Pete