directory.msad
[ 1 Introduction ] [ 2 Valid tags and data tables ] [ 3 Table structure ]
Introduction
The tags beginning with directory.msad
identify events generated by Microsoft Active Directory.
Valid tags and data tables
The full tag must have 3 levels. The first two are fixed as directory.msad
. The third level identifies the type of events sent.
These are the valid tags and corresponding data tables that will receive the parsers' data:
Product / Service | Tags | Data tables |
---|---|---|
Microsoft Active Directory |
|
|
|
| |
|
| |
|
| |
|
|
For more information, read more About Devo tags.
Table structure
These are the fields displayed in these tables: