cancel
Showing results for 
Search instead for 
Did you mean: 
abonadio
Level 7

Generate Report for Logon Failed

Hi,

please, I need to generate a report about user logon failed, because I need to verify why I have this issue.

On ESM I downloaded the Windows Authentication Content Pack for help me to see the logon fail but the view produced by this pack, it's very helpful but doesn't transformation in report.

Who know how create an user Logon Failed on MS Active DIrectory?

Thank a lot.

0 Kudos
4 Replies
penoffd
Level 10

Re: Generate Report for Logon Failed

Can you be more specific?

Are you just looking for a Windows Event ID 4625 (An account failed to log on) or a specific account failing to log on?

There is a signature ID for this event in the Receiver Windows Events Rules - 43-263046250.

0 Kudos
abonadio
Level 7

Re: Generate Report for Logon Failed

Hi,

form Windows Authentication Content Pack dashboard, I see the Failed Windows Logons, and then I need to create a reports for handstand why I have this issue on IT Infrastructure.

The Authentication Content Pack -> Failed Windows Logons dashboard it's wonderful but how traslate on report this?

image_1.png

image_2.png

The query dashboard it's below image, this but this query doesen't it's possible using in report query:

image_3.png

I don't Understand can build a same report format.

thanks

0 Kudos
abonadio
Level 7

Re: Generate Report for Logon Failed

for this dashboard In my ESM Log I don't see any sig-id 43-263046250 but I see this sig-id 43-263047690, 43-263047760, 43-263047710.

For me It's not clear how create an report for this signature.

thanks

0 Kudos
abanaru
Level 11

Re: Generate Report for Logon Failed

When you create a new report select "View PDF" as the format and the report will contain your chosen dashboard.

See pages 304-304 in the https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/PD26818/en_US/...

0 Kudos