Count(*) doesn't equevalent output of sql

In Query Workbench I have:
select count(*) from fortigate-alias
and output is 158816925
And in query workbench I have:
Select * from fortigate-alias
Output is 200.
why Query workbench limited me?

You can click the Explain button in Query Workbench to check the difference between the two queries, count(*) uses value_count aggregation which gives the total document count in the index , but select * paginates the query results by setting from=0&size=200, so only the top 200 documents will be returned.