User Access Logging overview¶

Note

This query requires the UAL license option.

Display machines with products that support Microsoft User Access Logging (UAL).

Fields¶

Name	Type	Visible	Description
Organization ID	numeric	false	Internal ID that references the Organization entity (Foreign Key)
Organization	string	true	Name of the organization this entity is mapped to
Organization Description	string	false	Description for the organization this entity is mapped to
Machine Guid	guid	false	A unique ID that can be used to link to this machine object by external applications
Machine	string	true	Distinct machine name. Use Column Chooser to show partial values such as Name or Domain of machines
Machine Name	string	false	Machine name (computer name)
Domain Name	string	false	Windows NETBIOS Domain Name
Machine Description	string	false	Description attribute of the directory service or manually entered during offline scan
Directory Path	string	false	Path where the machine was found in the directory service. Usually an LDAP path.
Directory Container Path	string	false	Path to the container of this object. Provided for grouping or export to other applications.
Operating System	string	false	Full name of the OS
Operating System Version	string	false	Additional version information about the OS
Machine ID	numeric	false	Internal ID for the Machine entity (Primary Key)
Product Name	string	true	Microsoft User Access Logging product name
Role Name	string	true	Microsoft User Access Logging role name
Guid	string	false	A unique ID that can be used to link to this machine object by external applications
First Seen	date	true	Date/Time where access was first seen for this role on this machine
Last Seen	date	true	Date/Time wher access was last seen for this role on this machine
Last Ual Scan	date	true	Time of the last imported User Access Logging scan on this machine. Null for machines that don't support UAL.
Last Ual Scan GUID	guid	false	GUID of the last imported User Access Logging scan on this machine. Null for machines that don't support UAL.
Last Scan	date	false	Date/Time of the last imported scan for this machine as reported by the machine (may be out of sync)
Last Scan GUID	guid	false	GUID of the last imported .scan file for this entity.
Current Date Time	date	false	Date and time the query was run. For reference if you use and save query results.

Main entities referenced from this query¶

Query information¶

Property	Value	Description
Query Guid	c45a7c1c-e3e5-49db-8142-bba30f08e2c0	The internal id of the query. Must be unique
SupportsDesktop	true	If true, the query can be started from the OctoSAM Windows GUI
SupportsWeb	true	If true, the query can be started from the OctoSAM Web UI