Reference Guide

Output
.--------.--------.---------------------.---------------.---------.----------.
| Domain | Name | Id | Primary group | Type | Source |
|--------|--------|---------------------|---------------|---------|----------|
| NAS | carl | S-1-5-21-1100376456 | Domain Users | Windows | EXTERNAL |
| | | -3253980028-2903806 | | | |
| | | 399-1165 | | | |
|--------|--------|---------------------|---------------|---------|----------|
| NAS | carla | S-1-5-21-1100376456 | Domain Users | Windows | EXTERNAL |
| | | -3253980028-2903806 | | | |
| | | 399-1114 | | | |
'--------'--------'---------------------'---------------'---------'----------'|
events auditing view
Display the details of a single event.
Format
events auditing view <UniqueID>
Arguments
Argument Description Format
<UniqueID> Unique ID of the event Existing event ID
Example
Display the details of event 1975784:
CLI> events audit view 5188
Output
Event ID = 17000001
Event Time = 08-Dec-14 12:35:41
Severity = Info
Workspace = System Audit
Headline = Successful Write by CPLSUP3\Administrator on jvol1/secret.txt
Text = Description: The User CPLSUP3\Administrator performed a
successful write operation
on file jvol1/secret.txt. The Desired access mask: WRITE_DATA/
ADD_FILE (0x2)
Action Items =
Internal Info =
events auditing list
Display a list of the security events.
Format
events auditing list
CLI Commands
51