The pmintrust.sh script is not collecting rejected events for use by InTrust
The pmintrust.sh script dumps the Privilege Manager for Sudo Commands (from a proprietary log file) into a text based file (pm_evlog.intrust) which InTrust will then gather. Currently in version 2.0 the script is not dumping rejected events.
Product Defect #0006526
A fix will be available in an future release so that the script will correctly process the reject events.