Is there a way to show all failed login attempts for bad user names? I am currently sampling a different product that shows events that I can't seem to find in ADAudit Plus? 

For example, The other product shows a failed logon event as a result of a misspelled or bad user account. I check the same timestamp in ADAP and nothing. 

Another example: Same product shows failed login attempts against existing user names, and ADAP does not. But I can see in ADAP the resulting locked account.

Thanks, 

Noel