Will audit logs capture the username attempted when that user is not a registered user?

Products

• Carbon Black EDR

Issue/Introduction

Do the /var/log/cb/audit logs capture the username attempted when that user is not a registered user?

Environment

• Carbon Black EDR Server: All Supported Versions
• Carbon Black EDR Sensors: All Supported Versions

Resolution

No. Login attempts from non-registered accounts will show up as username "unknown".