How to search report of all login attempts on OS-level and Splunk level?

[alexievca]

Could someone tell me how can I make a search query to report of all login attempts on OS-level and Splunk level.

Thank you,
Alex

[Ginesa]

Please someone to help with this!

[to4kawa]

splunk access log :

https://docs.splunk.com/Documentation/Splunk/8.1.1/Troubleshooting/AboutAccessLogs

Do you get OS level logs? what's sourcetype?

[alexievca]

Thank you for your reply. I think linux_secure

[alexievca]

I have to onboard(monitor) the so called “Linux secure” OS level log in the new index that I created called linux-secure and report all login attempts on OS level and Splunk level. Then also report all failed logins and the same way on OS level and Splunk. Finally the part that is really easy to create the dashboard. That I was told to do and to be honest I am baffled as simple as it looks