English Version of question:
index to have a field called "count", for each "user" and issued a total of "count", you have to appear in the order number is large.
| stats sum (count) by user
| sort - sum (count)
For human small number you want to exclude, if you want to display only a large number top ten, Are you sure you want if you use any kind of command?
top and I was or try to use such as a command or have changed but a result, we have may not be displayed well.
Better advice thank you for a good way you know.
try this,
|stats sum(count) as total by user | sort - total | head 10
Cheers!
出来ました!ありがとうございました。
hope this helps you.