The “Authority Failure Events” come for the System Value QAUDLVL (Security Audit Level). This particular system value monitors for
o All access failures (sign-on, authorization, job
o Incorrect password or user ID entered from a device
Depending on what you are auditing in your security is the type of failures you will receive.
Hope this helps…