Centrify DirectAudit Suite 2014 and above
In releases prior to Suite 2014, the user name and machine names for the audit trail events are stored in different formats from those for the audited sessions. This makes it difficult to define the scope of Audit Roles to view sessions/events for particular users and/or machines based on user and machine names.
From Suite 2014 onward, the Audit Trail user name will be stored as
username@domainname for domain user
username@machineFQDN for local user
machine name will be stored as FQDN