The customer can not get a Permit log when the user's audit mode is set to audit(SUCCESS FAILURE LOGINSUCCESS LOGINFAILURE) for SUDO event.
He can get a permit log after he set the audit(SUCCESS FAILURE) at SUDO rule.
Does it work as per design?
OS: All Product: CA Privileged Identity Manager r12.8 SP1 and higher.
Permit audit log is generated by Resource audit mode.
So, It works as design.