Report - Failed Login Attempt Rate

[MStritt]

I've been tasked to create a report showing the Failed Login attempt rate over time (hr/day/week/month). I'm assuming it could/would be off the sysevent table (even name login.failed). Looking for a graph with standard deviation, and be able to look at one day where it deviates from the standard.

[James Chun]

Hi @MStritt,

There is an OOB application called Security Center that provides various security-related metrics including failed logins.

https://docs.servicenow.com/bundle/washingtondc-platform-security/page/administer/security-center/co...

Selecting the widget will let you apply a date filter and see more details.

Cheers

[MStritt]

Thanks! Is it possible to add it to a dashboard?

[James Chun]

I believe the data is collected from an indicator, so you can add a new 'Performance Analytics' widget to a dashboard.

After adding the widget, select 'Failed logins' under the 'Indicator' field