Daily totals

```
fields @timestamp, @message
| filter @message like /BedrockUsage/
| parse @message /input_tokens\D+(?<in_toks>[0-9]+)/
| parse @message /output_tokens\D+(?<out_toks>[0-9]+)/
| filter ispresent(in_toks) and ispresent(out_toks)
| stats
    count(*) as bedrock_calls,
    sum(in_toks) as input_tokens,
    sum(out_toks) as output_tokens,
    sum(in_toks) + sum(out_toks) as total_tokens,
    sum(in_toks) + 5 * sum(out_toks) as est_quota_tokens
  by bin(1d) as day
| sort day desc
```