A.1 Event Structure

All events logged through Sentinel have a standardized set of fields. This allows Sentinel to log events to a structured database and query events across all logging applications.

Identity Manager events provide information in the following field structure:

CEF:Version|Device Vendor|Device Product|Device Version|Event Number|Event Name|Severity|Extension