a simple line to add to /etc/pam.d/system-auth to show failed login attempts like this
There were 166327 failed login attempts since the last successful login.
simple run the following
sed -i --follow-symlinks '/pam_limits.so/a sessiont requiredt pam_lastlog.so showfailed' /etc/pam.d/system-auth
