Read one login alert

Understand

A log records an event. An alert means a detection rule matched and needs checking. An alert is not automatically a confirmed incident.

Example

Made-up login alert: user A had five failed sign-ins, then one successful sign-in from the same office device.