Open topic with navigation

Types of Audit Events

Two types of audit events are generated on Logger and available for Audit Forwarding to ArcSight ESM.

• Platform Events, which are related to the Logger hardware/system.
• Application Events, which are related to Logger functions and configuration changes on it.

Both types of events are stored in the Logger Internal Storage Group. As a result, these events can be searched using the Logger Search UI. For example, you can search for this platform event:

“/Platform/Authentication/Failure/Password”