Unsecured LDAP Binds

Hi Team. 

We are going through a test run of Change Auditor. I am trying to report / alert on Unsecure LDAP binds that might be happening in our environment. The EventID is 2889 in the Directory Service. How can i search for a specific EventID? Still learning so maybe i am missing where i can supply this in the What on the search. 

We are running version 7.2 at the moment

Thanks in advance

Parents Reply Children
No Data