The following logs record authentication and authorization events. 

Audit Code

Log

AUDIT_1010

Auth provider <auth_provider_name> registered

AUDIT_1011

Auth provider <auth_provider_name> updated

AUDIT_1012

LDAP login failed for user: <username>

AUDIT_1013

LDAP login failed as user: <username> is not in the required group: <auth_provider_registration_group_name>, dn: <email>

AUDIT_1017

API token created for user <username>

AUDIT_1018

API token deleted for user <username>

AUDIT_1023

Roles updated for user <username>

AUDIT_1030

API token deleted for user <username>

AUDIT_1031

API token updated for user <username>

AUDIT_1032

All API tokens deleted for user <username>

AUDIT_1033

All API tokens deactivated for user <username>

AUDIT_1036

Created initial user with username: <username>.

AUDIT_1037

Created user with username: <username>.

AUDIT_1039

Created LDAP user with username: <username>.

AUDIT_1040

Created external user username: <username>.

AUDIT_1041

Deleted user: <username>.

AUDIT_1042

Updated user: <username>.

AUDIT_1043

Updated LDAP user: <username>.

AUDIT_1044

Updated external user: <username>.

AUDIT_1046

Updated account password for user: <username>.

AUDIT_1047

Updated last login for user: <username>.

AUDIT_1048

Successful login by User: <username>.

AUDIT_1057

Failed login attempt for user: <username>

AUDIT_1058

Failed login attempt for user: <username>

AUDIT_1059

Maximum login attempts exceeded. Rejected login attempt for user: <username>

AUDIT_1060

Login denied. Tenant id not found for user <username>

AUDIT_1061

Global role created: <role_name>

AUDIT_1062

Custom role created: <role_name>

AUDIT_1063

Custom role updated: <role_name>

AUDIT_1064

Authority role created: <role_name>

AUDIT_1065

Composite role created: <role_name>

AUDIT_1066

Role deleted: <role_name>

AUDIT_1067

Role updated: <role_name>

AUDIT_1068

Role <role_name> assigned to user <username>.

AUDIT_1069

Role <role_name> unassigned from user <username>.

AUDIT_1070

Certificate role created: <role_name>

AUDIT_1071

Certificate role updated: <role_name>

AUDIT_1092

Failed login attempt for user: <username>. User is not active.

AUDIT_1093

Failed login attempt. User does not exist.