Sample failed authentication events

For example, the following data block is an audit record for a failed authentication:

<event rev="1.2">
  <date>2005-10-02-21:59:31.977-04:00I-----</date>
  <outcome status="320938184" reason="authenticationFailure">1</outcome>
  <originator blade="webseald" instance="default">
    <component rev="1.4">authn</component>
    <event_id>101</event_id>
    <action>0</action>
    <location>cmd.wma.ibm.com</location>
  </originator>
  <accessor name="">
    <principal auth="" domain="">testuser335</principal>
    <user_location>9.54.83.206</user_location>
    <user_location_type>IPV4</user_location_type>
  </accessor>
  <target resource="7">
    <object></object>
  </target>
  <authntype>formsPassword</authntype>
  <data>
    Password Failure: testuser335
  </data>
</event>

Parent topic: Data blocks and output elements