On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of Splunk® App for Microsoft Exchange (EOL).
For documentation on the most recent version, go to the latest release.
User Record Changes
The User Record Changes dashboard shows information about changes to user objects in the AD environment, from both a security and a directory services perspective.
This dashboard's selection panel allows you to filter results based on Forest, Site, Domain, and Server. You can also control how much information the app displays by selecting the time range you desire in the time range picker on the upper right side of the dashboard.
You can narrow your search by typing in the name of a user in the Account User field in the upper portion of the dashboard.
Last modified on 13 January, 2017
| AD Administrator Audit | Failed Logons |
This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 3.4.1
Download manual
Feedback submitted, thanks!