Hi,
I configured CEF auditing for all IAM components we use at our customer. We analyzed CEF logs and especially the audit logs from iManager does not show much information.
For example, we selected that we wanna know about the configuration changes in iManager. In can see in the Syslog server a message/log that the "SystemConfigurationChange" has been logged and who did the change, but we do not see what exactly was changed. It is possible to have more details in the CEF auditing in iManager? For example to see that someone changed Timeout of sessions from the value X to the value Y? Or who changed look and feel settings? etc.