Version: 1.3.3 (0fda9dc) (*Hansa*) Field login_name
Is there a way to create a stream with a rule that says if a certain user (let's say johndoe) logs in 5 times with in 1 minute send the alert. We know the filed name but not the user name. We do something similar with error messages but in that we are looking for a specific error message or message type here we do not know the users name it could be any of thousands of different names. Any help would be much appreciated!!! Rick -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/4fda233c-e58f-487c-84ad-582f3cbeb142%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
