(9788) DECnet EVL and Security Audits?

[User]

I'm getting the following message in opcom and it keeps scrolling. Is there a
cause for this or a way to turn it off.

%%%%%%%%%%% OPCOM 10-AUG-2004 09:56:48.37 %%%%%%%%%%%
Message from user AUDIT$SERVER on SHARE2
Security alarm (SECURITY) and security audit (SECURITY) on SHARE2, system id: 10
64
Auditable event: Network login
Event time: 10-AUG-2004 09:56:48.37
PID: 2460CC20
Process name: EVL
Username: DECNET
Process owner: [1,4]
Image name: $1$DUA0:[SYS0.SYSCOMMON.][SYSEXE]LOGINOUT.EXE

As for auditing I have:

System security alarms currently enabled for:
ACL
Authorization
SYSGEN
NCP
Audit: illformed
Breakin: dialup,local,remote,network,detached
Login: dialup,network
Logfailure: batch,dialup,local,remote,network,subprocess,detached

System security audits currently enabled for:
ACL
Authorization
SYSGEN
Audit: illformed
Breakin: dialup,local,remote,network,detached
Login: dialup,local,remote,network
Logfailure: batch,dialup,local,remote,network,subprocess,detached
FILE access:
Failure: read,write,execute,delete,control

This is running in a homogenous cluster and both systems are being hit by this.

Any suggestions would be appreciated.

Thanks,
Mike

[Wizard]

Something is triggering the DECnet event logger and quite possibly
triggering a failure within the event logger, and your goal is to
find the trigger.

Please ensure you have the current ECOs for OpenVMS and for DECnet
loaded, as a start, and please then contact the customer support
center directly -- details of the EVL configuration and access to
any dump files or logs will be of interest.