About login failed log question
Posted: Fri Dec 27, 2019 3:11 am
I am using splunk to analyze the openvpn login log, and currently I want to create a log alarm for login failure.
A problem was encountered during the analysis. The log of successful login contains the user name, but the log of failed login and user name are not displayed in the same log.
How do I associate a login failure log with a username?
A problem was encountered during the analysis. The log of successful login contains the user name, but the log of failed login and user name are not displayed in the same log.
How do I associate a login failure log with a username?