Usually is /var/log/xferlog .....
Login error is usually /var/log/auth.log or /var/log/security

Under Linux, there is a set of scripts called logcheck (google "linux logcheck").
See if you could use it in Solaris.