Failed Logon Attempts Per Day Per Host

The following splunk query will return the number of failed logon attempts per user per host for each day. You will need to have the following apps installed: Splunk Add-on for Microsoft Windows You can adjust the warning (case) threshold to fit your needs. (This query is for Windows 2008 and newer operating systems)


Continue Reading →

Gauge of Windows Failed Logons

Gauge of Windows Failed Logons. Adjust the gauge to meet your environments needs.

Continue Reading →