For ELK and MSSQL

Here is result (this is kibana visualize count)

For ELK and IIS

Here is result

For ELK system and windows event log

Here is result (this is kibana visualize count)

.

For Win event log

Turn on windows logon event log

Follow on