Credential Record Deleted
Sent when a user deletes a credential record. For more information, see Credentials Manager.
General Information
Event ID: 25500
Event message details: Credentials <Account> have been deleted
Severity: Warning
Parameters
Parameter Name  | Description  | Example  | 
|---|---|---|
CredentialsId  | Credential record ID.  | CredentialsId="023adcf1-07fd-4883-be51-443afc2e49e6"  | 
AccountName  | Account user name.  | AccountName="user2"  | 
UserName  | Name of the user who performed an operation.  | UserName="TECH\user1"  | 
UserFullInfo  | Detailed information about the user who performed an operation. Includes the following data: 
  | UserFullInfo="<ModifiedUserInfo fullName="TECH\user1" loginType="0" />"  | 
Version  | Event version (service parameter).  | Version="1"  | 
Description  | Event message details.  | Description="Credentials user2 have been deleted"  | 
Syslog Message Example
<14>1 2023-10-20T17:26:17.002516+02:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=25500 CredentialsID="023adcf1-07fd-4883-be51-443afc2e49e6" AccountName="user2" param3="0" param4="0" param5="0" UserName="TECH\user1" UserFullInfo="<ModifiedUserInfo fullName="TECH\user1" loginType="0" />" Version="1" Description="Credentials user2 have been deleted"]  |