How can one track attempted logins to a specific server. I know to use .z.pc/po to track open and closed connections, does .z.pw need to be used to track failed login attempts .i.e wrong user name/ password ?
Yes, you would need to add logging in .z.pw. .z.pw is called before .z.po so if a user fails this check, .z.po won’t be called.
See also
If this reveals opportunities to improve the articles, please suggest them to librarian@kx.com.