For username who has logged into greater than 1 geoip.country_name in the last 12 hours

Hey Guys is this possible,

I want to create a summary view where i see a list of users that have
logged into our website but have come from greater than one source in a
period of time,

Perhaps even a count of different content in fields and I can drill down
into it per user if it says like 4 different countries in 12 hours I recon
we have a bit of a problem...

Any help is appreciated.



You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
To view this discussion on the web visit
For more options, visit