kibana.yaml配置
# Kibana is served by a back end server. This setting specifies the port to use.
#server.port: 5601
# Specifies the address to which the Kibana server will bin...
查询lyad账号操作AD账号的操作：
Category:"用户帐户管理" AND SubjectUserName:"lyad"
查询对账号zhangsan进行的操作：
Category:"用户帐户管理" AND TargetUserName:"zhangsan"
查询zhangsan登录失败的日志：
E...
