Hi Team,
In CAPAM logs i have observed that some logs we are getting login and logout transactions but username it is showing as Unknown. But transaction is admin.
Please find the attached logs screenshot and explain what is this cause.
Hi Bhumesh, When you raise questions here, can you please include the PAM release that you make the observation on? There was a known problem prior to PAM 3.2.3, see item "01163347 DE386547 "Unknown" user in alerts and session logs." on page https://docops.ca.com/ca-privileged-access-manager/3-2-4/en/release-information/resolved-issues-in-3-2-3
If you run a lower release, that most likely is your problem. If you run 3.2.3 or 3.2.4, it would be different and may still need to be looked at. In that case please open a support case for detailed review.