Question:
Why  <no_login_user> is displayed in the DirectAudit  Analyze Report ?
How can we suppress <no_login_user> from the advanced monitoring activity report?

Answers:
The <no_login_user> is displayed when a file is modify by a system account in NIX* machine. 

Solution:
Modify the below Parameter from the /etc/centrifyda/centifyda.conf and then Run "dareload -m " to take the full effect. 
=========================
event.file.monitor.user.skiplist: -1 
=========================

**Note**
In Release 18.8 (Suite 2818.1), the "-1" will be included with default setting of "event.file.monitor.user.skiplist"  instead of "root" Only.
==========================================

 # event.file.monitor.user.skiplist: root -1
=============================================