Audit Event Information
An ArcSight Management Center audit event contains information about the following prefix fields.
-
Device Event Class ID
-
Device Severity
-
Name
-
Device Event Category (
cat
)
See Audit Logs for details on how to generate audit logs.
Note: If no Syslog Daemon connector is installed or configured on your local host, then no audit events will be visible.