Suspected Brute force attack Investigation

'Summarize all the failures and success events for all users in the last 24 hours, only identify users with more than 100 failures in the set period'