We are building saved queries, but are seeing more data than we want to. ESQL has a Stats command that could allow us to set thresholds for queries. For example, it would allow us to build a saved search that only shows us hostnames that have 5 or more failed logins for the past 24 hours. I'd love to see the Stats be available for use