Chat now with support
Chat with Support

On Demand Audit Current - User Guide

Introducing On Demand Audit Configuring On Demand Audit Change Auditor Integration Working with On Demand Audit Appendix A: Working with Filters Documentation Roadmap

Copying event details

When selecting an event that has been returned from a search, you can copy the event details to clipboard to paste into another application.

To copy event details

  1. Select the Searches tab.
  2. Locate the required search in the list of categories.
  3. Highlight the search and click the arrow icon to run it.
  4. Click an event to open a new window that contains all the event details.
  5. Select Copy to clipboard to copy all event details to a clipboard.

Modifying a search

Only custom searches can be modified.

NOTE: Built in searches cannot be modified. However, you can create a new search based on it and customize the settings to suit your needs. See Creating a search from an existing search.

To modify a search

  1. Under the Searches tab, select the search.
  2. Click the pencil icon to modify the search.
  3. Edit the search name, remove, add, edit search criteria as required. Search terms are highlighted in the preview (and search results and event details) to allows you to quickly scan for matches.
  4. Change the category, if required by selecting a new category from the drop don list.
  5. Click Edit Columns to rearrange, add, and remove columns as required. See Customizing the columns displayed in a search.
  6. Click Save to apply the changes.
  7. If required, click Alert, select the required alert plan (or create a new alert plan) to notify the required individuals , click Save. See Working with alerts and alert plans

Deleting a search

To remove a search

  1. Select the Searches tab.
  2. Locate the required search in the list of categories.
  3. Highlight the search and click the X icon to delete it.
  4. Click Delete to confirm the removal.

Working with categories

 

By default, the following categories are available:

  • My searches: A built-in private category.
  • All: All configured searches.
  • All Events: All events in the last 24 hours and 7 days.
  • Azure Active Directory: Azure Active Directory application, directory, group, role, self-service password, user created, user deleted, and user events in the last 7 days.
  • Office 365: Office 365 and SharePoint online events.

To create a category

  1. Under the Searches tab, click Add in the Categories field.
  2. Enter the category name and click Add.

To assign a search to a new category

  1. Under the Searches tab, select the search.
  2. Click the pencil icon to modify the search.
  3. Drop down the Category field and select the required category.
  4. Click Save.

To edit the name of a category

  1. Under the Searches tab, select the category.
  2. Highlight the category, and click the pencil icon to the left of the category.
  3. Enter a new name for the category and click Save.
Related Documents