PAM audit event log sample
The following is a sample of an audit event log for Centrify Audit Event ID 24100. This log sample documents PAM authentication being granted. The change was made by user=dwirth(type:ad,dwirth@acme.vms) on April 4 at 21:04:14.
Apr 4 21:04:14 engcen6 adclient[1749]: INFO AUDIT_ TRAIL|Centrify Suite|PAM|1.0|100|PAM authentication
granted|5|user=dwirth(type:ad,dwirth@acme.vms) pid=7458
utc=1459784054942 centrifyEventID=24100 DAInst=AuditingInstallation DASessID=c72252aa-e616 -44ff-a5f6-d3f53f09bb67 status=GRANTED
service=sshd tty=ssh client=dc.acme.vms