Login events are captured in /var/log/centrifydc-login.log by default. You can turn off this feature by setting the logger.login.log parameter to off. Refer to Collecting information specific to login events for more information about /var/log/centrifydc-login.
Doc Feedback