Kerberos audit event log sample
Sep 29 11:27:22 AbelRedhat5 adclient[8002]: INFO AUDIT_TRAIL|Centrify Suite|Kerberos|1.0|200|Initializing KCM credential cache succeeded|5|user=root pid=8584 utc=1538191642025 centrifyEventID=63200 DASessID=N/A DAInst=N/A status=SUCCESS service=kcm process=adclient pid=8002 ccache=1001 principal=user1@ABEL.TEST