A security administrator notices that a specific user is generating excessive logs due to repeated authentication failures. The administrator wants to see only failed authentication events for that user in the monitor tab. Which filter string should be used in the log viewer?
Select one:
Palo Alto Networks often tests the distinction between the correct field name 'addr.src' versus the ...