Attached is the config screen for my alert. I already have the servers I want checked off at the top : 

And this is what the event in the logs that I want to cause the alert:

I'm not sure what else I need to do. I simply want any failed attempts to log in to a few servers in a one minute time-span to send me an email.  Any tips that point me in the right direction is much appreciated.  Thanks in advance.