GROUP BY
Hello!
I miss the GROUP BY feature in graylog. For example, I want to create an Alert, which alert me, if one ip fails to login 10 times the last 10 minutes.
Like in SQL, it wil be just a query like SELECT COUNT(*) FROM stream_ssh time > NOW() ...