| KB ID: | 10031 |
| Last Revision: | November 26, 2006 |
| Version: | 1.0 |
Search: Find the events when a user has been deleted from a group.
The advantage of using LogClarity® is that it takes all the need for Event IDs out of your hands. Some edits to an object that are logged with their respective IDs but you have to know the Event ID to do the search. With Log Fidelity's solution, we take away the need for the ID all together, and let you search by the type of information you would have in a real life scenario. LogClarity® goes a step further to provide extended information for events missing critical pieces of information or contain misleading incorrect information.
PREREQUISITES
(Optional) The username of the object that edited the group, the group object name, or the name of the object that was deleted from the group.
ESTIMATED QUERY TIME
<1 second.
METHOD 1 (Quick Search)
1. Enter the name of the user
that modified the object, the name of group, or the name of the object
that was deleted from the group in the
Quick Search field and click Go.
2. (If needed) use the Smart Filter to filter out unrelated
events.
METHOD 2 (Advanced Search)
1. Enter the name of the user
that modified the object in the Client Name field and click Submit.
- or -
1. Enter the name of the group that was modified in the Target
Name field and click Submit.
- or -
1. Enter the name of the user, group, computer, or object that was
deleted from the group and click Submit.
- or -
1. Select the description that ends in "Group Member Added" and
click Submit.
If you want to isolate the events when an object was deleted from a group by entering the name of the object that was deleted, use Advanced Search and put the name in the Parameter Name field.
LIKELY SCENARIOS IT APPLIES TO
- You have a security sensitive group and you want to find out who has been deleting objects from the group.
- You want to find out when an object got deleted from a group.
FINE TUNE YOUR SEARCH
If you know the time scope, domain of the edited objects, or want to restrict your searches to users in a specific domain you can fine tune your search.