SharePoint Audit Log Event ID 38
38: SharePoint site collection administrator removed
This is an event from
SharePoint
audit event from
LOGbinder SP
generated by
.
On this page
A member was removed from the site collection administrators.
Free Security Log Resources by Randy
- Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
- Site: This is the URL of the site generating this event
- User: name of the user who performed the action
- Administrator
- ID: ID of the site collection administrator that was removed
- Name: Name of the site collection administrator that was removed
Supercharger Free Edition
Your entire Windows Event Collection environment on a single pane of glass.
Free.
This Event Is Produced By
Which Integrates with Your SIEM