A new tool to help investigate ‘Login Failed’ errors in SQL Server has been recently implemented and published on
CodePlex: http://ssat.codeplex.com/
The tool is implemented in C# and uses xEvents to capture “Login Failed” errors. It also uses security ring buffer
information (from sys.dm_os_ring_buffers)
to retrieve error related information and do the analysis. More details are @
http://ssat.codeplex.com/
Mark as Answer if it helps. This posting is provided "AS IS" with no warranties, confers no rights.