Alerts and Events from the dashboard reports on a regular basis that More than 30% of Authentication attempts in the last 30 minutes have failed. Generally this happens a couple of hours after everyone here has left for the day. I'm very curious to determine what/who is attempting to authenticate during this time period. Can anybody tell me is there a good way to go about this? I have run show log security from the VC console but no matter what I enter for count it only goes back a few hours
We are running firmware 8.7.1.8_83050 and mostly AP-565s with a few AP-505s sprinkled in
Thanks much for any assistance