When was a user put into a group?

I have a scenario where I need to see when a user was added to a certain group. I can't for the life of me figure out how to show only the user and the group member being added. I can see all the events of either the user, or the group, but not ONLY when the user was added to the group. Can anyone help?
Thanks,

Joe

Parents
  • Start by launching the out-of-the-box All Events Search.

    Select the "Event" column and filter for "Member added to group"

    From the middle bar of the user interface (between the events details), select "Related Search" and select "Member added to group"

    This will create a Search of just member added to group events.

    This should be a good start for you.  You can then tweak the filters on this Search as needed - for example, to focus on the specific group.

  • Thanks Johnny,

    I can see hundreds of Member added to group events. I want to only see the events where a specific user was added to a specific group.

    Joe

  • Once you have your Search for "Member Added to Group", you can then filter on the group by:

    1. Select the What tab on the Search properties

    2. Select "Add with Events"

    3. Select Subsystem | Active Directory

    4. Right under where it says object (middle of the dialog), change the filter to "contains" by clicking on the far left of the field.

    5. Type some characters in your desired group name

    6. Your desired group should show up in the list

    8. Select it by clicking on it and then clicking the Add button

    9. Click OK

Reply
  • Once you have your Search for "Member Added to Group", you can then filter on the group by:

    1. Select the What tab on the Search properties

    2. Select "Add with Events"

    3. Select Subsystem | Active Directory

    4. Right under where it says object (middle of the dialog), change the filter to "contains" by clicking on the far left of the field.

    5. Type some characters in your desired group name

    6. Your desired group should show up in the list

    8. Select it by clicking on it and then clicking the Add button

    9. Click OK

Children
No Data