I have loaded login data into Elasticsearch using Logstash. I have fields: username retcd workstation. I want to query and get a count of failed logon requests by username and workstation on a given day. The indexes are named like logstash-2014.11.18. What would a query for this look like on th…

Return Logstash Failed User logons by day and return code

Topic		Replies	Views
Elasticsearch as Logwatch Elasticsearch	7	2073	July 6, 2017
Elastic query Elastic Search	5	121	June 12, 2025
Percentage after aggregation Elasticsearch	6	9149	July 5, 2017
Query to calculate login success and failure rates Elasticsearch	2	1219	May 24, 2021
Kibana hits are different Kibana	19	6590	November 22, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Return Logstash Failed User logons by day and return code

Related topics