index=main sourcetype="WinEventLog:Security" EventCode=4624 |stats count by Account_Name
index=main sourcetype="WinEventLog:Security" EventCode=4624 |stats count by Account_Name
index=main sourcetype="WinEventLog:Security" EventCode=4624 |stats count by Account_Name