Is there a way to report failed login attempts?

[glenswanton]

I am trying review system logs and I am trying to see if there is a way to search for failed login attempts.   Can anyone tell me where I would locate these messages?

[Chuck Tomasi · Accepted solution]

You can create a business rule on the event table to watch for these types of entries and trigger a notification.

You can schedule a report to run periodically and be delivered.

Several things you can do once you have the data.

Reference:

Business Rules - ServiceNow Wiki

Business Rules Best Practices - ServiceNow Wiki

Administering reports    

[Jeff Boltz1]

I report on failed logon attempts.

You will need to turn on script actions to capture the failed logons to get the field to populate.   Then you can run a notification or scheduled report.