incidentfield-Failed_Logon_Events.json

{
    "id": "incident_failedlogonevents",
    "version": -1,
    "modified": "2023-06-13T21:19:00.853901858Z",
    "name": "Failed Logon Events",
    "ownerOnly": false,
    "description": "The number of failed logon events in a specific timeframe. Can be used with reference to the \"Failed Logon Events Timeframe\" field.",
    "cliName": "failedlogonevents",
    "type": "number",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "openEnded": false,
    "associatedToAll": true,
    "unmapped": false,
    "unsearchable": true,
    "caseInsensitive": true,
    "sla": 0,
    "threshold": 72,
    "fromVersion": "6.8.0"
}