Name | Type |
Description |
---|---|---|
ComputerName | nvarchar(255) |
Name of the computer from which the log was gathered. |
Domain | nvarchar(255) |
Name of the domain to which the computer belongs. |
Type | int |
Computer type, e.g. server or workstation. For Windows computers, this field has a bitmask value. For other computers, the value is 0. For more information about bitmask values, see the description of the SERVER_INFO_101 network management structure in the MSDN library. The sv101_type member defines the possible values. |
PlatformID | int |
The computer’s platform (operating system) ID. The following platform IDs are used:
|
VersionMajor | int | Major version number of the computer's operating system. For example, the major version of Windows 8 is 6. |
VersionMinor | int | Minor version number of the computer's operating system. For example, the minor version of Windows 8 is 2. |
Name | Type |
Description |
---|---|---|
ID | int |
ID of the event in the InTrust gathering session. |
SessionID | int |
ID of the gathering session. |
GatheringComputer | nvarchar(255) |
Computer from which the event was retrieved. |
PlatformID | int |
Platform (operating system) ID of the computer from which the event was retrieved. |
VersionMajor | int |
Major version number of the audited software on the computer where the data was collected. InTrust data sources define the major version values as specified below. When event caching is not used during gathering:
When event caching is used during gathering:
|
VersionMinor | int |
Minor version number of the audited software on the computer where the data was collected. InTrust data sources define the minor version values as specified below. When event caching is not used during gathering:
When event caching is used during gathering:
|
EventLog | nvarchar(255) | Name of the log from which the event was retrieved. |
RecordNumber | int |
The event's number, used for storing the position of the last gathered event. |
Computer | nvarchar(255) | Computer on which the event occurred. |
UserName | nvarchar(255) |
Name of the user who produced the event. |
UserDomain | nvarchar(255) |
Domain of the user who produced the event. |
EventType | int |
Event type. |
Source | nvarchar(255) |
Name of the event's source. |
EventID | int |
ID of the event. |
Category | nvarchar(255) |
Category of the event. |
GMT | datetime |
Event generation time in GMT format. |
LocalTime | datetime |
Event record time; this time is local to the computer from which the event was retrieved. |
Name | Type |
Description |
---|---|---|
EventID | int |
ID of the event in the InTrust gathering session. This field corresponds to the ID field in the Events table. |
SessionID | int |
ID of the gathering session. This field corresponds to the SessionID field in the Events table. |
EventData | image |
Binary data of the event. |
Name | Type |
Description |
---|---|---|
EventID | int |
ID of the event in the InTrust gathering session. This field corresponds to the ID field in the Events table. |
SessionID | int |
ID of the gathering session. This field corresponds to the SessionID field in the Events table. |
Description | ntext |
Description of the event. |
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center