Status: OUT
RHEL 9 observability is identity-integrated at both collection and verification layers: the centralized logging and audit subsystem (rsyslog framework, file watches, auid login identity tracking) feeds into identity-verified security monitoring where IdM-provided Kerberos identities ensure audit trails are tied to verified principals, not just UIDs.