
MikeG.44606 (Customer) asked a question.
I am looking for logs for login attempts for email addresses not setup as users in our Okta tenant. Is there a query to return that or is it available via api? I can see the logs for users (actors) setup in our tenant. Just cannot see if a wrong email was used as the username.

maybe use can export the login event by login report, but there are only actor.alternate_id and actor.display_name. you can compare with your data.