Alert for login fail on the WebUI

Hello all,

Anybody know of the rule for when a user tries to log in to WebUI and fails can get alerted?

The auth_log is the table you want, but I’ve never tried to alert on that.

Thanks murrant I will play around with it, see if I can get it working. :slightly_smiling_face: