Folder Details
User Activity->Account Management->Group Membership Changes->VMware
VMware
Field Matching
FieldDescriptionSample Value
When At what date and time a user activity originated in the system. 1/1/2000
Who Account or user name under which the activity occured. SomeUser
What The type of activity occurred (e.g. Logon, Password Changed, etc.) Group Membership Changed
Where The name of the workstation/server where the activity was logged. 10.10.10.10
Where From The name of the workstation/server where the activity was initiated from. 10.10.10.10
Severity Specify the seriousness of the event. High
WhoDomain
WhereDomain
Whom Account or user name being managed. Administrator
Member Name Account name of added/removed group member Administrators
Group Type The type of group: security or distribution.
Group Scope The scope of group: local, global, universal
Group Name
Group Domain