Reading Search Results

In the image below, you can see the search results. Cygna Auditor lists all modifications made by Ian Rush. This user modified Europe Admins and North America Admins groups and disabled a user account.

Icon

Description

The date when the change occurred.

The time when the change occurred.

The action and object type.

The user who made the change.

,

The computer where the change occurred.

, ,

More details regarding the change. For example, the name of the object that was changed, attributes, etc.

Note: You might see several records with events that occurred at the same time up to seconds—for example "create user" with subsequent "modify user". Typically they represent a single, one-time action. The reason why Cygna Auditor displays it as several records is that Windows actually generates several events in response to your actions.