Centrify Audit & Monitoring Service – Windows audit event log sample
The following is a sample of an audit event log for Centrify Audit Event ID 9001. This log sample documents a successful login. The change was made by user=administrator@p3f1r2.test on January 06 at 15:53:10.
Jan 06 15:53:10 s2k8r2p1v1.p3f1r2.test wdad[1128]: INFO AUDIT_TRAIL|Centrify Suite|DirectAudit - Windows|1.0|1|login success|5|user=administrator @p3f1r2.test userSid=S-1-5-21-1986235188-3370598863- 2160698129-500 sessionId=1 centrifyEventID=9001 DAInst=AuditingInstallation DASessID=c72252aa-
e616-44ff-a5f6-d3f53f09bb67