{"id":"rhel9-identity-integrated-observability","text":"RHEL 9 observability is identity-integrated at both collection and verification layers: the centralized logging and audit subsystem (rsyslog framework, file watches, auid login identity tracking) feeds into identity-verified security monitoring where IdM-provided Kerberos identities ensure audit trails are tied to verified principals, not just UIDs.","truth_value":"OUT","source":"","source_url":"","source_hash":"","justifications":[],"dependents":[],"metadata":{"_retracted":true},"explanation":{"steps":[{"node":"rhel9-identity-integrated-observability","truth_value":"OUT","reason":"retracted premise"}]}}