Chat now with support
Chat with Support

Change Auditor 7.2 - User Guide

Change Auditor Overview Agent Deployment Change Auditor Client Overview Overview Page Searches Search Results and Event Details Custom Searches and Search Properties Enable Alert Notifications Administration Tasks Agent Configurations Coordinator Configuration Purging and Archiving your Change Auditor Database Disable Private Alerts and Reports Generate and Schedule Reports SQL Reporting Services Configuration Change Auditor User Interface Authorization Client Authentication Certificate authentication for client coordinator communication Integrating with On Demand Audit Enable/Disable Event Auditing Account Exclusion Registry Auditing Service Auditing Agent Statistics and Logs Coordinator Statistics and Logs Change Auditor Commands Change Auditor Email Tags

Run searches

To run a previously saved search or built-in report:
1
Open the Searches page.
2
Expand and select the appropriate folder in the explorer view to display the list of search definitions stored in the selected folder.
3
Use one of the following methods to run a search:
•
Double-click the search definition.
•
Right-click the search definition and select Run.
•
Select the search definition and click Run.
4
A new Search Results page will be displayed populated with the events that met the search criteria defined in the selected search definition.

Run a quick search

Quick search allows you to run a search immediately without saving the search definition. To save the search definition, you can select Save As before you run the search.

To run a quick search:
1
Open the Searches page.
2
Select the Quick Search node in the explorer view to display the Quick Search entry in the Searches list
3
You can either run the default quick search which will retrieve all events that were generated since the beginning of the week or define the search criteria to be used.
•
To run the default search, double-click the Quick Search entry in the Searches list or click Run.
•
To define the search criteria, select the Quick Search definition to enable the Search Properties tabs. On the Search Properties tabs, enter the search criteria to use. Once finished entering the search criteria, click Run from one of the Search Properties tabs.
4
A new search results tab, titled Quick Search, will be displayed populated with the events that met the search criteria defined.

Search Results and Event Details

•
Introduction
•
Search Results page
•
View search results
•
Preview search results
•
Compare results side-by-side
•
View event details or search properties
•
Copy event details
•
Email event details
•
Copy event details
•
Add comments
•
View user context and run related searches
•
Protect critical objects, mailboxes, files and folders
•
Add search properties to existing event queries

Introduction

Audit events are the changes captured by agents, reported to a coordinator, and then written to the database. These events can be retrieved and viewed through searches. When you run a search, Change Auditor searches the events in the database for the desired results. The results are then displayed in the Search Results page.

The terms ‘searches’ and ‘reports’ are used in conjunction to acquire the desired output. You run a 'search' and the results returned is a ‘report’.

Auditing and centralizing the collection of events is only one part of the total control and output required for enterprise security and compliance. It is equally important to be able to retrieve the real-time data and sort through it quickly and efficiently.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating