Thanks Rev1 ... that worked perfectly.
------------------------------
Mike Whalen
Sr. Analyst, Distributed DB Security
Lincoln Financial Group
Radnor PA
------------------------------
Original Message:
Sent: 12-09-2025 09:22
From: rev1 g
Subject: Using "Having" in the DSF Analyzer
use this values count: { $gt: 10 } at the "Having" section in screen you get the results of failed logon attempts by user where the user has more than 10 failed logon attempts if all the group section attributes have the same values .
------------------------------
Rev1
Original Message:
Sent: 12-08-2025 15:31
From: Mike Whalen
Subject: Using "Having" in the DSF Analyzer
Does anyone know how to use the "Having" section in this screen? I am trying to get a report of failed logon attempts by user where the user has more than 10 failed logon attempts.

#DatabaseActivityMonitoring
------------------------------
Mike Whalen
Sr. Analyst, Distributed DB Security
Lincoln Financial Group
Radnor PA
------------------------------