Bad logon/password failure but exclude locked accounts
I am trying to track down the thousands of failed logins/bad passwords in a report. I can clearly run a report on those, but I need to exclude accounts that are locked out. Does anyone know how to do that? I have not see anything in the filters to allow that.