I am trying to write a report to capture failed login attempts.
For the report, I am filtering by "Type equals Audit" and in my failed login table, I am filtering by "Operation equals 'Log In'" and "Audit status contains 'Failure'".
With the table, I have been able to get the date/time, admin user name, Operation, audit status and general info.
I can not seem to find where I can find within the report to add the "Client IP" field that I see in the normal Audit logs
Audit LogCurrent Table Setting in reportAttempt to add "Client IP"
Any suggestions? 🙂