The log entry you provided indicates that within a 5-minute period, three failed login attempts were made from a single IP address to three different accounts on the server. This could potentially be a security concern as it suggests someone may be attempting to gain unauthorized access to the server.
Since the issue seems to be occurring only at night and possibly after the application is reloaded, it could be worth investigating whether there are any automated processes or scripts running during that time that may be triggering the login attempts. Additionally, you may want to review the server's access logs to see if there are any other suspicious login attempts or activity from the same IP address.
As for Qlik Sense alerts, you could set up an alert to trigger when a certain number of failed login attempts are detected within a specific time frame. This would allow you to quickly respond to any potential security threats and take necessary actions to mitigate them.
