Hello Dears
I'm trying to find out the failed login attempt over my OWA in Exchange 2013
After some research I found it should be on IIS Virtual Directory logs (C:\inetpub\logs\LogFiles\W3SVC1), and I should use Log Parser 2.2 to export the needed results. (I used this article http://myriadofthings.com/outlook-web-access-owa-and-activesync-reporting-using-iis-logs/)
But when i parsed the logs, i wasn't able to find my failed attempts that i just did now as a test.
I should fond them in the results. But I only find results for past 9 hours and earlier. not sure why my last attempts were logged as expected.
Could you please advise what I'm missing here? Is this the right way to get the failed login attempts for 2013 OWA, and why its not updates by last failed attempts.
Thanks in advance
Islam Zorina System Engineer | MCITP | MCSA | MCSE eslamzorinaa@hotmail.com