Which events are only in Centrify Audit & Monitoring Service

Audit events may come from Centrify Authentication Service, Centrify Privilege Elevation Service, or Centrify Audit & Monitoring Service. If you are using only authentication and privilege elevation, the following events will not be available to you as they are from audit and monitoring service:

  • All the audit events from the following categories:
    • Audit Analyzer
    • Audit Manager
    • Command
    • Centrify Audit & Monitoring Service - Windows
    • Centrify Audit & Monitoring Service System Management
    • Centrify Audit & Monitoring Service UNIX Agent
    • Centrify Audit & Monitoring Service advanced monitoring
  • The following audit events from the category Centrify Commands
    • Auditing enabled (Centrify Event Id 18000)
    • Auditing not enabled (Centrify Event Id 18001)
    • Auditing disabled (Centrify Event Id 18100)
    • Auditing not disabled (Centrify Event Id 18101)