11.2 Understanding the CEF Event Types

You can configure CEF to log events in the following categories:

  • Security

  • Objects

  • Attributes

  • LDAP

You can audit the following default set of event types:

Category

Event Type

Security

  • ACL Changed

  • Add Member

  • Delete Member

  • Intruder Detected

  • Login Disabled

  • Login Enabled

  • Login

  • Change Security Equals

  • Audit Config

  • Change Password

  • Account Unlock

  • Logout

  • Connection

  • Impersonate

  • Authenticate

  • Verify Password

  • Change Login Config

  • Query Credentials

Objects

  • Create Object

  • Delete Object

  • Rename Object

  • Move Object

  • DSA Read

  • Search

Attributes

  • Read Attribute

  • Delete Attribute

  • Add Value

  • Delete Value

  • Compare Attribute Value

LDAP

  • LDAP Bind

  • LDAP Bind Response

  • LDAP Unbind

  • LDAP Connection

  • LDAP Search

  • LDAP Search Response

  • LDAP Search Entry Response

  • LDAP Add

  • LDAP Add Response

  • LDAP Compare

  • LDAP Compare Response

  • LDAP Modify

  • LDAP Modify Response

  • LDAP Delete

  • LDAP Delete Response

  • LDAP Modify DN

  • LDAP Modify DN Response

  • LDAP Abandon

  • LDAP Extended Operation

  • LDAP System Extended Operation

  • LDAP Extended Operation Response

  • Modify LDAP Server Configuration

  • Unknown LDAP Operation

  • LDAP Password Modify