Count specific user logons

[ha100]

I want to count how many times a user has logged on every month or week on windows servers in the domain. I have created the item so I have the events coming in. Now I only want to sum up how many times this happens in a time period. How hard can it be? How to do it? I looked at sum but can't make it work.

[Singularity]

Create a new item with type as calculated item.
https://www.zabbix.com/documentation...pes/calculated

[ha100]

Thanks for this reply. Could the formula be as simple as this?
sum (eventlog[Security,user,,,4624])
It says syntax error

[Singularity]

As per the link I shared, it should be something like sum( //key[key_parameters], time_duration )
I guess you accidently mentioned time duration inside parameters

[ha100]

Thanks, I found the simple problem was that I put a space between sum and (. However it still does not work. Now it says it is not a numeric value. How can I achieve it? All I want is to have in a list or preferably a graph how many times a useraccount has logged into windows. I don't need the complete event, only count the event id's of this one user. That should be easy no? Can I count triggers with calculate?