https://learninghub.kx.com/forums/topic/creating-access-log-ipc
How can one track attempted logins to a specific server. I know to use .z.pc/po to track open and closed connections, does .z.pw need to be used to track failed login attempts .i.e wrong user name/ password ?
Yes, you would need to add logging in .z.pw. .z.pw is called before .z.po so if a user fails this check, .z.po won’t be called.
See also