topic Re: Is there a search that will return all changes creation, deletion of global groups? in Reporting

Is there a search that will return all changes creation, deletion of global groups?

DanAlexander1 — Tue, 12 Jul 2022 16:16:24 GMT

Hi to All,

I need help with creating an Active Directory changes report.

I used Win Events like 4728, 4729, 4730 but could not print to PDF

Is there a search that will return all changes creation, deletion of global groups?

Thank you!

Re: Is there a search that will return all changes creation, deletion of global groups?

marysan — Sun, 17 Jul 2022 12:25:02 GMT

index=MyIndex EventCode IN (4728,4729,4730) user=*
| eval time=_time
| convert ctime(time)
| eval msg="A user "+user+" was "+action+" on the host "+host+" by "+src_nt_domain+"\\"+src_user+" at "+time
|table msg,EventCode,action,user,signature,status

Re: Is there a search that will return all changes creation, deletion of global groups?

DanAlexander1 — Thu, 19 Jan 2023 15:55:35 GMT

Thank you for helping me out. Much appreciated!

Re: Is there a search that will return all changes creation, deletion of global groups?

marysan — Fri, 31 May 2024 15:38:37 GMT

@DanAlexander1
If your problem is resolved, then please click one of the "Accept as Solution" buttons to help future readers. 🙂