Which Events are Only in IBM Audit & Monitoring Service

Audit events may come from IBM Authentication Service, IBM Privilege Elevation Service, or IBM Audit & Monitoring Service. If you are using only authentication and privilege elevation, the following events will not be available to you as they are from audit and monitoring service:

• All the audit events from the following categories:

  • Audit Analyzer
  • Audit Manager
  • Command
  • IBM Audit & Monitoring Service - Windows
  • IBM Audit & Monitoring Service System Management
  • IBM Audit & Monitoring Service UNIX Agent
  • IBM Audit & Monitoring Service advanced monitoring

• The following audit events from the category IBM Commands

  • Auditing enabled (IBM Event Id 18000)
  • Auditing not enabled (IBM Event Id 18001)
  • Auditing disabled (IBM Event Id 18100)
  • Auditing not disabled (IBM Event Id 18101)