I have an account that randomly gets a "login failed for user" error on my SQL server. It's an service account that runs part of the company intranet. The intranet has unfortunately been developed by a vendor who has no idea where the failed request is coming from, so I'm trying to do as much leg work as i can on the SQL side. the error seems to come randomly, so I don't want to turn SQL profiler on and monitor this all day. Is there an easier way to track down where this is coming from? The server is already set up to log failed logins only, but I don't know where these are logged, nor do I know if there's more i can do to capture more information.
Thanks in advance for the help.