I am facing an issue while checking Splunk logs for failed login attempt. i can see All the servers on Splunk console.When are trying to make a failed login attempt. The logs don’t show the server name on which the attempt is made.
What about the host field in the logs?
