get_login_failures_by_ip
Identify top source IPs with failed login attempts in Keycloak. Provide date range and limit to get failure counts per IP for security analysis.
Instructions
Get login failure statistics broken down by source IP.
Args: date_from: Start date (YYYY-MM-DD). Defaults to last 24h when omitted (KEYCLOAK_DEFAULT_DATE_FROM_HOURS). date_to: End date (YYYY-MM-DD). Empty for all. top: Number of top IPs to show (default 20).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| top | No | ||
| date_to | No | ||
| date_from | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |