https://community.splunk.com/t5/Splunk-Search/Search-query-login/m-p/24430#M4499 <P>Hi all, i need to do a query about the number of login failed and succeeded in a time period. I'm auditing linux and windows machines. Thanks</P> Tue, 03 Aug 2010 16:26:00 GMT pinzer 2010-08-03T16:26:00Z https://community.splunk.com/t5/Splunk-Search/Search-query-login/m-p/24430#M4499 <P>Hi all, i need to do a query about the number of login failed and succeeded in a time period. I'm auditing linux and windows machines. Thanks</P> Tue, 03 Aug 2010 16:26:00 GMT https://community.splunk.com/t5/Splunk-Search/Search-query-login/m-p/24430#M4499 pinzer 2010-08-03T16:26:00Z https://community.splunk.com/t5/Splunk-Search/Search-query-login/m-p/24431#M4500 <P>Hi,</P> <P>The Splunk for *NIX app that ships with the Linux versions has the queries "Successful User Logins" and "Failed Logins" built in (under the Users menu). Would that be sufficient? Just load Splunk, Enable the *NIX app and configure it.</P> Tue, 03 Aug 2010 16:35:47 GMT https://community.splunk.com/t5/Splunk-Search/Search-query-login/m-p/24431#M4500 stephanbuys 2010-08-03T16:35:47Z https://community.splunk.com/t5/Splunk-Search/Search-query-login/m-p/24432#M4501 <P>Are you trying to gather this information from the Windows Event logs and the syslogs from the *nix machines?</P> <P>Brian</P> Tue, 31 Aug 2010 18:55:58 GMT https://community.splunk.com/t5/Splunk-Search/Search-query-login/m-p/24432#M4501 Brian_Osburn 2010-08-31T18:55:58Z