List of Login Attempts to Splunk

This will return a list of users who attempted to login to the splunk searchhead. It will list both successful attempts and failed attempts.

index=_audit tag=authentication | stats count by user, info | sort - info