Secure TCP Command mode changed from [arg1] to [arg2] connection(s) by user ID [arg3] from [arg4] at IP address [arg5].
Informational
User activity (Informational)
Audit
No
None
Prefix:CMM
and ID:0851
mmTrapRemoteLoginS