Alert logon failure of various types

jfeitosa · ‎10-07-2015

I need to create alerts to logon failure of various types of logs that are coming to the indexer, for example: windows (4625), Linux, Aix, z / OS mainframe (SMF-80), AS / 400.
It can create login failure alert in a single search covering all index and sources?

Tks

woodcock · ‎10-07-2015

Yes. But that is not really your question, is it?

Alert logon failure of various types

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Community Content Calendar, September edition

Are you a member of the Splunk Community?

Alert logon failure of various types

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Community Content Calendar, September edition