Table of Contents
Advertisement
3 Click Search.
Some fields cannot be selected to refine a search this way:
EventTime
Message
Any field related to the Reporter
Any field related to the Observer
Any field related to TargetTrust
Any field with a value
6.3 Event Fields
Each event has fields that might or might not be populated, depending on the specific event. The
values for these event fields can be viewed by using a search or running a report. Each field has a
short name that is used in advanced searches. The values for most of these fields are visible in the
detailed event view; other values are also visible in the basic event view.
Event Fields
Table 6-1
Field
Severity
EventTime
EventName
52
Identity Audit Guide
Unknown
Short
Description
Name
sev
Normalized severity of event on a scale of
0 (informational) to 5 (critical)
dt
Time stamp of event. Can be the Identity
Audit server time stamp or the time stamp
from the original event source (if trust event
time is enabled)
evt
Short name of the event
Visible in
Visible in
Detailed
Basic View
View
X
X
X
X
X
X
Advertisement
Table of Contents
Need help?
Do you have a question about the IDENTITY AUDIT 1.0 - GUIDE and is the answer not in the manual?