# Kibana user logins evaluation
**URL:** https://discuss.elastic.co/t/kibana-user-logins-evaluation/250527
**Category:** Kibana
**Created:** [September 30, 2020, 3:00pm UTC](https://discuss.elastic.co/t/kibana-user-logins-evaluation/250527 "2020-09-30T15:00:47Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Thomas\_Sieger](https://discuss.elastic.co/u/Thomas_Sieger)
#### Post date: [September 30, 2020, 3:00pm UTC](https://discuss.elastic.co/t/kibana-user-logins-evaluation/250527/1 "2020-09-30T15:00:47Z")
Hello everyone,
I would like to monitor the login behavior of our users. However, I am currently not able to evaluate this, because the username is in the middle of the message.
Is there a possibility to filter by it or to display only the username?
The username is between two square brackets \<\> and is needed to find out who logs in how often per month or not at all.
Many thanks in advance
---
### Author:  [@rashmi](https://discuss.elastic.co/u/rashmi)
#### Post date: [September 30, 2020, 3:05pm UTC](https://discuss.elastic.co/t/kibana-user-logins-evaluation/250527/2 "2020-09-30T15:05:50Z")
> [@Thomas\_Sieger](#):
>
> login behavior of our users
The feature for monitoring security user activity is in Elasticsearch: [Auditing Security Events | X-Pack for the Elastic Stack [6.2] | Elastic](https://www.elastic.co/guide/en/x-pack/current/auditing.html)
Also perhaps you are interested in this feature request: [https://github.com/elastic/kibana/issues/18650](https://github.com/elastic/kibana/issues/18650)
Also you can find information here: [Kibana audit logging and usage data · Issue #17939 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/17939)
Thanks
Rashmi
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 30, 2020, 9:03pm UTC](https://discuss.elastic.co/t/kibana-user-logins-evaluation/250527/3 "2020-09-30T21:03:20Z")
Welcome to our community! 😃
Can you show us an example of the data that you are looking to query?
---
### Author:  [@Thomas\_Sieger](https://discuss.elastic.co/u/Thomas_Sieger)
#### Post date: [October 13, 2020, 3:04pm UTC](https://discuss.elastic.co/t/kibana-user-logins-evaluation/250527/5 "2020-10-13T15:04:31Z")
> message: 08.10.2020 17:31:35 [Thread-2819-XYZ] INFO de.maiksawq.xhw - Oct 8, 2019 1:32:35 PM \*\*\* user from client \ logged in
This is the only way i can analyze the login of my users. I want to use the username (in this case PXZQY) to find out how often in a certain timestamp the user logged in. The problem is that i have less knowledgement with Kibana and thats why I need help 😃
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 10, 2020, 3:04pm UTC](https://discuss.elastic.co/t/kibana-user-logins-evaluation/250527/6 "2020-11-10T15:04:35Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.