I need a solution
I have been working with support to determine how to create a "report from query" to show all failed logins (event ID 4625) on any agent. Seems simple enough but not, at least not yet.
Presently I can gather the information from Monitors > Events by exporting and filtering it in Excel which is a bit time consuming for a daily report. I'd like to make a query so that others can simply run the query when I am out of the office.
0