This alert is triggered by failed attempts to log in. It is typically used to warn of unauthorized log-in attempts.
Name: Incorrect login for user
Status (default): enabled
Detector: built-in, non-SQL
“Login errors detected for user *user* from *terminal* .”
This alert has no parameters.