Alerting

Alert logon failure of various types

jfeitosa
Path Finder

I need to create alerts to logon failure of various types of logs that are coming to the indexer, for example: windows (4625), Linux, Aix, z / OS mainframe (SMF-80), AS / 400.
It can create login failure alert in a single search covering all index and sources?

Tks

Tags (1)
0 Karma

woodcock
Esteemed Legend

Yes. But that is not really your question, is it?

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...