Best way to find which credential is triggering a failed login log entry

I am reviewing logs and have an appreciable number of entries of “Error attempting client login” on a daily basis. I’m assuming it is a system account since it is happening on a daily basis. What is the best way to find out what account is triggering these log entries?

Set up an audit log for your projects.

https://docs.inductiveautomation.com/display/DOC79/Using+Audit+Profiles