How to log failed samba logins

UCS - Univention Corporate Server
2

i got it:

https://help.univention.com/t/auth-json-audit