this an event and notification that user logged in
set the SIEM to ignore it
View solution in original post
