Which Events are Only in Centrify Audit & Monitoring Service

Audit events may come from Centrify Authentication Service, Centrify Privilege Elevation Service, or Centrify Audit & Monitoring Service. If you are using only authentication and privilege elevation, the following events will not be available to you as they are from audit and monitoring service:

• All the audit events from the following categories:

  • Audit Analyzer
  • Audit Manager
  • Command
  • Centrify Audit & Monitoring Service - Windows
  • Centrify Audit & Monitoring Service System Management
  • Centrify Audit & Monitoring Service UNIX Agent
  • Centrify Audit & Monitoring Service advanced monitoring

• The following audit events from the category Centrify Commands

  • Auditing enabled (Centrify Event Id 18000)
  • Auditing not enabled (Centrify Event Id 18001)
  • Auditing disabled (Centrify Event Id 18100)
  • Auditing not disabled (Centrify Event Id 18101)