| KB ID: | 10030 |
| Last Revision: | November 26, 2006 |
| Version: | 1.0 |
Search: Find the events when a user has been added to a group.
The advantage of using LogClarity® is that it takes all the need for Event IDs out of your hands. Some edits to an object that are logged with their respective IDs but you have to know the Event ID to do the search. With Log Fidelity's solution, we take away the need for the ID all together, and let you search by the type of information you would have in a real life scenario. LogClarity® goes a step further to provide extended information for events missing critical pieces of information or contain misleading incorrect information.
PREREQUISITES
(Optional) The username of the object that edited the group, the group object name, or the name of the object that was added to the group.
ESTIMATED QUERY TIME
<1 second.
METHOD 1 (Quick Search)
1. Enter the name of the user
that modified the object, the name of group, or the name of the object
that was added to the group in the
Quick Search field and click Go.
2. (If needed) use
METHOD 2 (Advanced Search)
1. Enter the name of the user
that modified the object in the Client Name field and click Submit.
- or -
1. Enter the name of the group that was modified in the Target
Name field and click Submit.
- or -
1. Enter the name of the user, group, computer, or object that was
added to the group and click Submit.
- or -
1. Select the description that ends in "Group Member Added" and
click Submit.
If you want to isolate the events when an object was added to a group by entering the name of the object that was added, use Advanced Search and put the name in the Parameter Name field.
LIKELY SCENARIOS IT APPLIES TO
- You have a security sensitive group and you want to find out who has been adding objects to the group.
- You want to find out when an object got added to a group.
FINE TUNE YOUR SEARCH
If you know the time scope, domain of the edited objects, or want to restrict your searches to users in a specific domain you can fine tune your search.