# View: user_login_facts_snowflake_usage

**View Name:** user_login_facts_snowflake_usage
**Table Source:** `Derived from: Account_Usage, Account_Usage.Login_History`
**File Path:** `user_login_facts_snowflake_usage.view.lkml`

## Overview

- **File Size:** 1526 bytes
- **Lines of Code:** 56
- **Dimensions:** 3
- **Measures:** 3
- **Dimension Groups:** 0
- **Filters:** 0

## Comments & Notes

- Or, you could make this view a derived table, like this:
- persist_for: "1 hour"
- dimension: avg_seconds_between_login_attempts {

## Dimensions

| Name | Type |
|------|------|
| `login_name` | string |
| `seconds_between_login_attempts` | number |
| `failed_logins` | number |

## Measures

| Name | Type |
|------|------|
| `total_failed_logins` | sum |
| `average_failed_logins` | average |
| `avg_seconds_between_login_attempts` | average |

## Derived Table

```sql
sql: select user_name
              , count(*) as failed_logins
              , timediff(seconds, event_timestamp, lead(event_timestamp) over(partition by user_name order by event_timestamp)) as seconds_between_login_attempts
              , event_at
              from account_usage.login_history
              where not (CASE WHEN is_success = 'YES' THEN TRUE ELSE FALSE END)
              group by user_name, event_timestamp;;
              #persist_for: "1 hour"
```

