Logger 4 event granularity? ":^)

[danholgate]

Hello

I am trying to understand ArcSight Logger 4.5.0.4892.0 better and how it can be better utilized and have a question.

For example I want to look at events like:

Windows Account Locked by user name from 6 or 12 Failed Login Attempts

Or

Unix Password File Access Attempt by user name

How can I find these events and drill down and get this type of granularity into them with the default processes and reports that came with the logger product?