Is there a way to retrieve LEM logs(especially Logon attempt failures) from its database to any sort of format. the domain was hacked, so we want to see logon attempts from the past few days. Please help
Sorry to hear about your breach. Are you asking for the logs for LEM itself, i.e. access attempts to the LEM console, or information on wider logon attempts for your entire estate?
Retrieving data ...