Folder Details
User Activity->Object Access->SharePoint Object Access->ChangeAuditor for SharePoint
ChangeAuditor for SharePoint
Events from ChangeAuditor for SharePoint
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: ChangeAuditor for SharePoint
No Filtering Fields Set.
Field Matching
FieldDescriptionSample Value
When At what date and time a user activity originated in the system. 1/1/2000
Who Account or user name under which the activity occured. SomeUser
What The type of activity occurred (e.g. Logon, Password Changed, etc.) Object Access
Where The name of the workstation/server where the activity was logged. 10.10.10.10
Where From The name of the workstation/server where the activity was initiated from. 10.10.10.10
Severity Specify the seriousness of the event. Medium
WhoDomain
WhereDomain
Result Successful or Failed
Object Name
Object Type
Whom