For username who has logged into greater than 1 geoip.country_name in the last 12 hours

Hey Guys is this possible,

I want to create a summary view where i see a list of users that have
logged into our website but have come from greater than one source in a
period of time,

Perhaps even a count of different content in fields and I can drill down
into it per user if it says like 4 different countries in 12 hours I recon
we have a bit of a problem...

Any help is appreciated.

Cheers

Tim

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/f553c4ea-2061-4245-a06d-090af8344c8e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.