Chat now with support
Chat with Support

Change Auditor for Active Directory Queries 7.0.4 - User Guide

AD Query Event Details

This section provides a description of the ‘What’ details that are provided on the Events Details pane for an AD Query event.

 

AD Query Performed

Created when an AD query is performed on a container.

Low

 

What

Shows the container that was queried. For example, on LDAP bind operations, this displays the name (DN) being bound to; on LDAP search operations, this displays the baseObject of the search; and on LDAP compare operations, this displays the entry (DN) of the object being compared.

Subsystem

Displays ‘AD Query’

Action

Displays ‘Other’

Facility

Displays ‘AD Query’

Type

Displays the type of query:

Scope

Displays the scope of coverage:

Results

Displays the number of results returned as a result of the query.

Authentication

Indicates whether the LDAP operation is secured using the SSL (Secure Socket Layer)/ TLS (Transport Layer Security) technology, simple bind authentication, or signed using Kerberos-based encryption.

Port

Indicates the port used for authentication.

Occurrences

Displays the number of times the query occurred during the specified interval.

Since

Displays the date and time when the query was first initiated.

Elapsed

Displays how long the query took to run. Zero (0) indicates that it took less than a millisecond to complete.

Kerberos

Indicates whether the LDAP operation or AD query is signed using Kerberos-based encryption.

Filter

Displays the filter string used in the query.

Attributes

Displays the attributes that were queried.

Related Documents