Custom audit action filter rules
Hello!
I'm trying to create custom filter rule for audit action.
I need filter specified event with specified information in description.
For example, i want to trace words "Write Property msExchDelegateListLink" form eventid 566
How can i create such rule?
Rule conditions (Attributes, Additional info2, etc. ) meanings are not clear for me. Where can i find description?
Please, Help!
Piter.
I'm trying to create custom filter rule for audit action.
I need filter specified event with specified information in description.
For example, i want to trace words "Write Property msExchDelegateListLink" form eventid 566
How can i create such rule?
Rule conditions (Attributes, Additional info2, etc. ) meanings are not clear for me. Where can i find description?
Please, Help!
Piter.
Topic Participants
AnandhSamy
New to M365 Manager Plus?
New to M365 Manager Plus?
New to RecoveryManager Plus?
New to RecoveryManager Plus?
New to Exchange Reporter Plus?
New to Exchange Reporter Plus?
New to SharePoint Manager Plus?
New to SharePoint Manager Plus?
New to ADManager Plus?