| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Lägger till grupp (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Adding.Group | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Lägger till användare (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Adding.User | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Misslyckad konsolinloggning (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Console.Failed | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Ogiltig konsolinloggning (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Console.Invalid | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Tar bort användare (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Deleting.User | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Misslyckad lösenordsändring (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Password.Change.Failed | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Maximalt antal försök till lösenordsändring (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Password.Change.Maximum.Tries | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Misslyckad ssh-inloggning (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Ssh.Failed | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Ogiltig ssh-inloggning (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Ssh.Invalid | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Lyckad ssh-inloggning (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Ssh.Succeeded | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Misslyckad su (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Su.Failed | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Lyckad su (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Su.Succeeded | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Misslyckad sudo (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Sudo.Failed | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Ogiltig sudo (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Sudo.Invalid | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |
| Lyckad sudo (SUSE Linux Enterprise Server 9) | Microsoft.ACS.Linux.SLES.9.Sudo.Succeeded | Microsoft.ACS.Linux.SLES.9.ACSEndPoint | EventCollection | True | False |