# Need Help Searching for Similarities in my Logs **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-alerting\ **Created:** [April 12, 2024, 7:28pm UTC](https://discuss.elastic.co/t/need-help-searching-for-similarities-in-my-logs/357322 "2024-04-12T19:28:40Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![vpolius](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vpolius/32/132838_2.png) [@vpolius](https://discuss.elastic.co/u/vpolius)\ **Post date:** [April 12, 2024, 7:28pm UTC](https://discuss.elastic.co/t/need-help-searching-for-similarities-in-my-logs/357322/1 "2024-04-12T19:28:40Z")
I am trying to find a query or filter to help me solve an issue. I have MFA logs coming into Elastic and I am trying to create an alert to let me know when an account authenticates using a phone number that is already used by another account. Is there a query or filter that I can use to achieve this search. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 10, 2024, 7:28pm UTC](https://discuss.elastic.co/t/need-help-searching-for-similarities-in-my-logs/357322/2 "2024-05-10T19:28:47Z")
Closed on May 10, 2024, 7:28pm UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed. ---
**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\ **Post date:** [June 3, 2024, 3:34pm UTC](https://discuss.elastic.co/t/need-help-searching-for-similarities-in-my-logs/357322/3 "2024-06-03T15:34:01Z")
Hi @vpolius, I would recommend if you can share the sample JSON document of MFA logs which saved in Elasticsearch ? and what output you expecting by performing filter query on it?