dzsh audit events

dzsh audit events
Centrify Event Id Description Parameters

33000-Deprecated

dzsh command execution granted

This event has been deprecated. Use Centrify Event Id 33002 instead, which was introduced in release 2017.3.

command: command

runas: username@domain

role: role name

env: environment variables

33001-Deprecated

dzsh command execution denied

This event has been deprecated. Use Centrify Event Id 33003 instead, which was introduced in release 2017.3.

command: command

reason: error message

33002

dzsh command execution granted

added in release 2017.3

command: command

runas: username@domain

role: role name

env: environment variables

MfaRequired: whether user was required to do MFA

EntityName: Entity Name

33003

dzsh command execution denied

added in release 2017.3

command: command

reason: error message

MfaRequired: whether user was required to do MFA

EntityName: Entity Name

34000

dzsh role change granted

fromRole: fromRole

toRole: toRole

34001

dzsh role change denied

fromRole: fromRole

toRole: toRole

reason: error message