For auditing the password check in event details, the Privileged Account Manager audit report can be used and these events can also be logged in the SIEM system like Sentinel.
Use this page to configure Privileged Account Manager so that it can send syslog messages to a syslog server. This server can be a Sentinel server, a Sentinel Log Manager, or a syslog server that supports TCP with optional TLS or SSL support. Older syslog servers require UDP for the transport protocol.
To configure communication with a syslog server: