Trying to get failed log on attempts from domain controller from ad users

I would like to get all failed logon attempts. I would like to see failed log on attempts from any computer that a user tries to authenticate to the domain controller.  I am testing the line below on my vm 2008 server in my home lab but its only returning 2 and they are not recent. I purposely failed logons multiple times on a windows 10 vm joined to the domain on the 2008 server vm to hopefully add it to the log but they didnt show up.  This is what I was using for a script.

get-eventlog -logname "security" | where {($_.eventID -eq 4771) -or ($_.eventID -eq 4776)} | select timegenerated,message

Select allOpen in new window