I need to create alerts to logon failure of various types of logs that are coming to the indexer, for example: windows (4625), Linux, Aix, z / OS mainframe (SMF-80), AS / 400.
It can create login failure alert in a single search covering all index and sources?
Tks
Yes. But that is not really your question, is it?