Unique count > Count in kibana

In order to perform well at scale the cardinality aggregation is an approximation, although you can tune this to some extent. The reason behind this is described well in this post.