Sample authentication terminate event

For example, the following data block is an audit record for the termination of an authentication:

<event rev="1.2">
  <date>2005-10-04-11:45:27.487-04:00I-----</date>
  <outcome status="0">0</outcome>
  <originator blade="webseald" instance="default">
    <component rev="1.4">authn</component>
    <event_id>103</event_id>
    <action>103</action>
    <location>cmd.wma.ibm.com</location>
  </originator>
  <accessor name="">
    <principal auth="IV_LDAP_V3.0" domain="Default">testuser1</principal>
    <name_in_rgy>cn=testuser1,dc=ibm,dc=com</name_in_rgy>
    <session_id>e005b3ae-34ed-11da-a016-00096bc369d2</session_id>
    <user_location>9.65.85.162</user_location>
    <user_location_type>IPV4</user_location_type>
  </accessor>
  <target resource="7">
    <object></object>
  </target>
  <authntype>formsPassword</authntype>
  <terminateinfo>
    <terminatereason>userLoggedOut</terminatereason>
  </terminateinfo>
  <data></data>
</event>

Parent topic: Data blocks and output elements