Failed Logon Events

The number of failed logon events in a specific timeframe. Can be used with reference to the "Failed Logon Events Timeframe" field.

Common Types number

Details

ID	`incident_failedlogonevents`
CLI Name	`failedlogonevents`
Type	number
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	No

Source

incidentfield-Failed_Logon_Events.json incidentfield-Failed_Logon_Events_Timeframe.json

Download History Raw

{
    "id": "incident_failedlogoneventstimeframe",
    "version": -1,
    "modified": "2023-06-13T21:20:01.302001465Z",
    "name": "Failed Logon Events Timeframe",
    "ownerOnly": false,
    "description": "The timeframe which the failed logon events occurred in.",
    "cliName": "failedlogoneventstimeframe",
    "type": "shortText",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "openEnded": false,
    "associatedToAll": true,
    "unmapped": false,
    "unsearchable": true,
    "caseInsensitive": true,
    "sla": 0,
    "threshold": 72,
    "fromVersion": "6.8.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}