Retrieve LEM logon attempt failures

Question

Hi all

Is there a way to retrieve LEM logs(especially Logon attempt failures) from its database to any sort of format. the domain was hacked, so we want to see logon attempts from the past few days. Please help

Thanks

silverbacksays · Answer

Hi simphiwe.mndebele​,

Sorry to hear about your breach. Are you asking for the logs for LEM itself, i.e. access attempts to the LEM console, or information on wider logon attempts for your entire estate?