3.0 Viewing All Events

Use the Administration Console to search and view events, configure filters and tags on events, export search results to files, refine event search by users, and view the vulnerability data about the events.

By default, the Administration Console displays events with all severity levels, allowing you to view the following information for each event:

  • The specific event severity

  • Either of the following:

    • The name of the file changed or accessed

    • The name of the Active Directory object changed

  • Either of the following:

    • The computer on which that file resides

    • The domain controller computer on which the Active Directory change occurred

  • Delta information (detected difference in the monitored file or Active Directory object), when applicable

  • Differential (diff) information (the actual changes made to the monitored file)

    NOTE:Events related to binary files include only delta information.

This chapter provides the following information: