The search results grid displays a default set of data, which can be customized by using the controls in the column headings. As on other web client pages, you can modify the sort criteria and filter the contents to be displayed (see Customize table content). In addition, the search results grid allows you to group the results by column heading in order to create an expandable view of the events.
NOTE: Selecting the F5 key to refresh your screen resets the data grid back to the grouping defined in the search’s Layout tab, removing any groupings that have been applied. |
Displays the source of the event:
| |||
Depending on the type of event, additional details may be displayed on this pane. See the Quest Change Auditor User Guide for a description of the additional fields that may be displayed. | |||
Indicates whether the operation mentioned in the event was successfully completed. Valid states are: | |||
Displays the event class facility to which the event belongs. | |||
5 |
To disable an event, click Disable. |
6 |
To run a related search, expand the Related Search button and select the appropriate option: |
• |
Who: Select this option to run a query for all events generated by this user during the same date interval as that specified in the When tab of the selected event. |
• |
View Contact Card: For events with a user object, select this option to view the contact card for the user, which includes contact information as well as a list of the groups to which this user belongs. |
• |
Where: Select this option to run a query for all events captured by this agent during the same date interval as that specified in the When tab of the selected event. |
• |
View Resources: Select this option to display the Resources Details pane for this server, which includes: Machine Info, Processors, Drives, Shares, Services and Exchange Mailboxes. |
• |
What: Select this option to run a query for events captured for this event class during the same date interval as that specified in the When tab of the selected event. |
• |
When: Select this option to run a query for events that occurred on this date. |
• |
Origin: Select this option to run a query for events that originated from this workstation or server during the same date interval as that specified in the When tab of the selected event. |
• |
Object: Select this option to run a query for events generated against this object during the same date interval as that specified in the When tab of the selected event. |
7 |
To restore a changed value to the previous value on a simple Active Directory object event, click the Restore Value button. If prompted for credentials, enter the credentials for a user with domain rights to access the selected object. (This button only appears for simple Active Directory object events, such as Add Attribute, Modify Attribute, Delete Attribute.) |
The Timeline view consists of the following main controls:
Click to display the search results in a Data Grid view instead of the Timeline view. | |
Event markers representing an individual event or a group of events are plotted on the timeline based on when the event actually occurred. The events associated with an event marker are controlled by the settings in the Timeline Display Settings dialog.
Each event marker contains the following components:
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center