# Logstash: find out the top users **URL:** \ **Category:** Logstash\ **Created:** [February 18, 2016, 5:02pm UTC](https://discuss.elastic.co/t/logstash-find-out-the-top-users/42165 "2016-02-18T17:02:28Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![taraka16](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@taraka16](https://discuss.elastic.co/u/taraka16)\ **Post date:** [February 18, 2016, 5:02pm UTC](https://discuss.elastic.co/t/logstash-find-out-the-top-users/42165/1 "2016-02-18T17:02:28Z")
I want to know whether I can get the top 5 active users through logstash and visualize it in Kibana. the log file looks like this: ``` 2016-02-18 13:58:30,924 comment_created=csearch, user=user107@mail.com, text=csearch 2016-02-18 13:58:35,522 highlight_created, user=user107@mail.com, text=the 2016-02-18 13:58:36,346 highlight_created, user=user107@mail.com, text=kage ``` in this example the user 'user107@mail.com' has made several activities and I wanna know whether logstash can filter that. At least to show that this is one of the most active users. ---
**Author:** ![Navneet\_Mathpal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/navneet_mathpal/32/3677_2.png) [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Post date:** [February 18, 2016, 7:00pm UTC](https://discuss.elastic.co/t/logstash-find-out-the-top-users/42165/2 "2016-02-18T19:00:36Z")
> [@taraka16](#): > > I want to know whether I can get the top 5 active users through logstash Use logstash KV filter to get the user > [@taraka16](#): > > visualize it in Kibana after indexing the data , getting top 5 user is quite simple using kibana... ---
**Author:** ![taraka16](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@taraka16](https://discuss.elastic.co/u/taraka16)\ **Post date:** [February 19, 2016, 9:01am UTC](https://discuss.elastic.co/t/logstash-find-out-the-top-users/42165/3 "2016-02-19T09:01:56Z")
Thanks a lot! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:10am UTC](https://discuss.elastic.co/t/logstash-find-out-the-top-users/42165/4 "2017-07-06T05:10:40Z")