All events logged through Sentinel have a standardized set of fields. This allows Sentinel to log events to a structured database and query events across all logging applications.
Identity Manager events provide information in the following field structure:
CEF:Version|Device Vendor|Device Product|Device Version|Signature ID|Name|Severity|Extension