SharePoint Audit Log Event ID 23
23: SharePoint object structure changed
This is an event from
SharePoint
audit event from
LOGbinder SP
generated by
.
On this page
This event is logged when the properties of a list or library are changed - such as adding a column. Also see event ID 22.
Free Security Log Resources by Randy
- Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
- Site: This is the URL of the site generating this event
- User: name of the user who performed the action
- Object
- Type: Such as List
- Subtype: such as Document Library
- URL: URL of the object targeted by this operation
- Title: title of the object targeted by this operation
- Description:
- Details: XML representation of the object's definition
Supercharger Free Edition
Centrally manage WEC subscriptions.
Free.
This Event Is Produced By
Which Integrates with Your SIEM
SharePoint object structure changed
Occurred: 11/21/2011 3:15:28 PM
Site: http://sp2010-sp
User: System Account
Object
Type: List
Subtype: Generic List
URL: /Lists/Tasks/AllItems.aspx
Title: Tasks
Description: Use the Tasks list to keep track of work that you or your team needs to complete.
Details: 14.0.0.4762.0.0<FieldRef Name="ContentTypeId" /><FieldRef Name="Title" ColName="nvarchar1" /><FieldRef Name="_ModerationComments" ColName="ntext1" /><FieldRef Name="File_x0020_Type" ColName="nvarchar2" /><FieldRef Name="Predecessors" ColName="int1" /><FieldRef Name="Priority" ColName="nvarchar3" /><FieldRef Name="Status" ColName="nvarchar4" /><FieldRef Name="PercentComplete" ColName="float1" /><FieldRef Name="AssignedTo" ColName="int2" /><FieldRef Name="TaskGroup" ColName="int3" /><FieldRef Name="Body" ColName="ntext2" /><FieldRef Name="StartDate" ColName="datetime1" /><FieldRef Name="DueDate" ColName="datetime2" /><Field ID="{b0227f1a-b179-4d45-855b-a18f03706bcb}" Name="_dlc_Exempt" StaticName="_dlc_Exempt" DisplayName="$Resources:dlccore,RecordResourcesItemExemptFromPolicy_DisplayName;" SourceID="http://schemas.microsoft.com/sharepoint/v3" Group="$Resources:dlccore,RecordResourcesColumnGroup;" Type="ExemptField" Indexed="FALSE" Hidden="TRUE" CanToggleHidden="TRUE" ShowInNewForm="FALSE" ShowInEditForm="FALSE" ShowInFileDlg="FALSE" ShowInDisplayForm="FALSE" Required="FALSE" Sealed="TRUE" ReadOnly="TRUE" OverwriteInChildScopes="TRUE" ColName="bit1" RowOrdinal="0" />
For more information, see http://logbinder.com/support
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection