text: *Example 11-4 Capturing failed logon attempts (AIX)*
  
  # $1 - OnDemand Instance Name 
  # $2 - Time Stamp 
  # $3 - Log Identifier 
  # $4 - Userid 
  # $5 - Account 
  # $6 - Severity 
  # $7 - Message Number 
  # $8 - Message Text 
  # 
  case $7 in 
   31) echo $4 $8 >> /home/archive/`date +"%d-%m-%Y"`failedlogon.log;; 
  *) echo $@ > /dev/null;; 
  esac 
  
  exit 0 
  
  For the exit sample that is provided in Example 11-4, we also provided a small sample of what 
  the output of this exit might look like (Example 11-5). For example, you can see in the output 
  that several unsuccessful attempts were made from the same machine and different user IDs 
  were used for each attempt. In this example, by adding parameter 2 ($2) to the output and 
  resorting the file, we can further establish the times of these attempts. 
  
  *Example 11-5 Sample exit output*
  
  ADMIN Failed login: GB55102K3.myServer.ibm.com 9.9.9.9 
  MARTIN Failed login: GB55102K3.myServer.ibm.com 9.9.9.9 
  FRED Failed login: GB55102K3.myServer.ibm.com 9.9.9.9 
  USER1 Failed login: GB55102K3.myServer.ibm.com 9.9.9.9 
  USER2 Failed login: GB55102K3.myServer.ibm.com 9.9.9.9 