Which token identifies a failed event in the structured login log?
status=ok
reason=key
status=failed
host=web-01