Describe the bug
A simple XOR boolean expression returns error when used with where command.
Expected behavior
It should work.
How to reproduce
index=crud earliest=-5y
| spath
| where operation="read" XOR count>0
Screenshots
Software version
pth_10 version: 10.4.0
Desktop (please complete the following information if relevant):
Additional context