Windows creates account clitest2 during cluster validation.
SoC might get alerts about this.

references:

Cluster validation account causes events or messages - Windows Server | Microsoft Learn