On October 20, 2021, the Splunk App for Windows Infrastructure will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Windows Dashboards and Reports.
User Record Changes
The User Record Changes dashboard shows information about changes to user objects in the AD environment, from both a security and a directory services perspective.
How to use this page
This selection panel lets you filter results based on Forest, Site, Domain, and Server.
You can also control how much information the app displays by selecting the time range you desire in the time range picker on the upper right side of the dashboard.
You can narrow your search by typing in the name of a user in the Account User field in the upper portion of the dashboard.
Last modified on 30 November, 2016
| AD Administrator Audit | Failed Logons |
This documentation applies to the following versions of Splunk® App for Windows Infrastructure (Legacy): 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.5.0, 1.5.1, 1.5.2, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4
Download manual
Feedback submitted, thanks!