ADObjectsAuditReports Log Messages

https://demo.adauditplus.com/help/index.html

ADObjectsAuditReports Log Messages

Base Rule

General Audit Messages

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

N/A

<severity>

Text/String

N/A

Category

<object>

Text/String

N/A

REPORT_PROFILE

<objectname>

Text/String

N/A

EVENT_NUMBER

N/A

N/A

N/A

TIME_GENERATED

N/A

N/A

N/A

EVENT_TYPE

N/A

N/A

N/A

EVENT_TYPE_TEXT

<status>

Text/String

N/A

SOURCE

<login>

Text/String

N/A

REMARKS

<reason>

Text/String

N/A

OBJECT_SERVER

N/A

N/A

N/A

OPERATION_TYPE

N/A

N/A

N/A

OBJECT_TYPE

N/A

N/A

N/A

OBJECT_TYPE_TEXT

N/A

N/A

N/A

OBJECT_NAME

N/A

N/A

N/A

OBJECT_NAME_TEXT 

N/A

N/A

N/A

OBJECT_LOCATION_TEXT

N/A

N/A

N/A

HANDLE_ID

N/A

N/A

N/A

PRIMARY_USER_NAME

N/A

N/A

N/A

PRIMARY_DOMAIN

N/A

N/A

N/A

PRIMARY_LOGIN_ID

N/A

N/A

N/A

CLIENT_USER_NAME

<dname>

Text/String

N/A

CLIENT_DOMAIN

<domainimpacted>

Text/String

N/A

CLIENT_LOGIN_ID

N/A

N/A

N/A

ACCESSES

N/A

N/A

N/A

OBJECT_CLASS

N/A

N/A

N/A

OBJECT_CLASS_TEXT

N/A

N/A

N/A

ATTRIBUTES

N/A

N/A

N/A

ATTRIBUTES_TEXT

N/A

N/A

N/A

ADDITIONAL_INFO

N/A

N/A

N/A

ADDITIONAL_INFO2

N/A

N/A

N/A

ADDITIONAL_INFO2_TEXT

N/A

N/A

N/A

ACCESS_MASK

N/A

N/A

N/A

FORMAT_MESSAGE

<subject>

Text/String

N/A

RECORD_NUMBER

N/A

N/A

N/A

CALLER_USER_SID

N/A

N/A

N/A

ATTRIBUTES_VALUE

N/A

N/A

N/A

CORRELATION_ID

N/A

N/A

N/A

ATTRIBUTES_NEW_VALUE

N/A

N/A

N/A

ATTRIBUTES_OLD_VALUE

N/A

N/A

N/A

ATTRIBUTE_CATEGORY_ID

N/A

N/A

N/A

ACCOUNT_NAME

N/A

N/A

N/A

ACCOUNT_DOMAIN

N/A

N/A

N/A

ACCOUNT_SID

N/A

N/A

N/A

CALLER_USER_NAME

N/A

N/A

N/A

CALLER_USER_DOMAIN

N/A

N/A

N/A

CALLER_LOGON_ID

N/A

N/A

N/A

OBJECT_CATEGORY_TYPE

N/A

N/A

N/A

CONFIG_SUB_CATEGORY

N/A

N/A

N/A

ROOT_DOMAIN_NAMING_CONTEXT

N/A

N/A

N/A