VMS Help ANALYZE, /AUDIT, /EVENT_TYPE, Examples  *Conan The Librarian (sorry for the slow response - running on an old VAX)

    1.$ ANALYZE/AUDIT/EVENT_TYPE=LOGFAIL -
      _$ SYS$MANAGER:SECURITY.AUDIT$JOURNAL

      The command in this example extracts all records of unsuccessful
      login attempts, which match the LOGFAIL class, and compiles a
      brief report.

    2.$ ANALYZE/AUDIT/EVENT_TYPE=(NOLOGIN,NOLOGOUT) -
      _$ SYS$MANAGER:SECURITY.AUDIT$JOURNAL

      The command in this example builds a report in brief format of
      all audit records except those in the LOGIN and LOGOUT event
      classes.