Please help share query to check
> network logs and firewall blocks for specific Host machine
> LDAP password login failed query for specific user account
>
Very sparse information here - please share some anonymised sample events, preferably in a code block (using the </> edit option. Please share what you have already tried. Where your events have been ingested to. What your current results are, etc. Contributors are pretty talented here but mind-reading is a rare capability!