I would like to monitor the login behavior of our users. However, I am currently not able to evaluate this, because the username is in the middle of the message.
Is there a possibility to filter by it or to display only the username?
The username is between two square brackets <> and is needed to find out who logs in how often per month or not at all.
message: 08.10.2020 17:31:35 [Thread-2819-XYZ] INFO de.maiksawq.xhw - Oct 8, 2019 1:32:35 PM *** user from client <abcs (testdomain-server.xyq)> logged in
This is the only way i can analyze the login of my users. I want to use the username (in this case PXZQY) to find out how often in a certain timestamp the user logged in. The problem is that i have less knowledgement with Kibana and thats why I need help
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.