Windows creates account clitest2 during cluster validation. SoC might get alerts about this.

references:

Cluster validation account causes events or messages - Windows Server | Microsoft Learn