Folder Details
User Activity->Privilege Use
Privilege Use
New Folder Description
Field Matching
FieldDescriptionSample Value
When At what date and time a user activity originated in the system.
Who Account or user name under which the activity occured.
What The type of activity occurred (e.g. Logon, Password Changed, etc.)
Where The name of the workstation/server where the activity was logged.
Where From The name of the workstation/server where the activity was initiated from.
Severity Specify the seriousness of the event.
WhoDomain
WhereDomain