What do the following fields represent in the alarm settings alarm configuration tab for Excessive Failed TACACS Authentication Attempts. I'm thinking they are filters. If so, can I have multiple line entries with comma separation? And is this alarm for NAD - ISE errors or can this be used for tracking failed user attempts?
