SIEM
Log Explorer
Search the normalised event store. Use field = value, field contains value, joined with AND / OR.
Field explorer
Top source.type
Saved queries
Query history
- No queries run yet.
8 events
Histogram by hour
Results
| Timestamp | Source | Code | Host | User | Message | Sev |
|---|---|---|---|---|---|---|
| 1970-01-01 08:02:00Z | windows | 4625 | WS-HR-002 | svc_backup | A user account was locked out | info |
| 1970-01-01 06:06:00Z | windows | 4625 | SRV-DC-01 | l.ferreira | A user account was locked out | info |
| 1970-01-01 03:29:00Z | windows | 4625 | WS-HR-002 | l.ferreira | Special privileges assigned to new logon | info |
| 1970-01-01 02:56:00Z | windows | 4625 | WS-HR-002 | l.ferreira | A user account was locked out | info |
| 1969-12-31 16:56:00Z | windows | 4625 | SRV-DC-01 | m.tanaka | Special privileges assigned to new logon | high |
| 1969-12-31 16:07:00Z | windows | 4625 | WS-ENG-231 | d.kusuma | Special privileges assigned to new logon | low |
| 1969-12-31 15:21:00Z | windows | 4625 | WS-HR-002 | a.pratama | An account failed to log on | medium |
| 1969-12-31 11:42:00Z | windows | 4625 | LNX-BUILD-07 | m.tanaka | An account failed to log on | low |