F5 BIGIP Excessive Failed Logins detection
Triggers when more than 5 failed login detected in one hour time span. set rule to run every 60mins
Splunk (SPL)

Triggers when more than 5 failed login detected in one hour time span. set rule to run every 60mins

Already have an account?