User Record Changes
The User Record Changes dashboard shows information about changes to user objects in the AD environment, from both a security and a directory services perspective.
This dashboard's selection panel allows you to filter results based on Forest, Site, Domain, and Server. You can also control how much information the app displays by selecting the time range you desire in the time range picker on the upper right side of the dashboard.
You can narrow your search by typing in the name of a user in the Account User field in the upper portion of the dashboard.
AD Administrator Audit
This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 3.4.2, 3.4.3, 3.4.4, 3.5.0, 3.5.1, 3.5.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3