When I came here I didn't check the comments but I finally found the answer myself, and then I saw the comments. To prevent other users such mistakes, here is the answer to find all the counted actions:

fields @timestamp, @message
| parse @message ',"nonTerminatingMatchingRules":[{"ruleId":"*","action":"*"' as rule, action
| filter action = "COUNT"
| sort @timestamp desc
| limit 20