SharePoint Audit Log Event ID 24

SourceSharePoint (LOGbinder SP)
Audit FlagSearch
Windows Security Log
 • Subcategory
Object Access
 • Application Generated
Type Success

24: Search performed

This is an event from SharePoint audit event from LOGbinder SP generated by Audit Flag  Search.

On this page

This event documents a search query executed by a user.

Free Security Log Resources by Randy

Description Fields in 24

  • Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
  • Site: This is the URL of the site generating this event
  • User: name of the user who performed the action
  • Search: the search criteria and scope

Supercharger Free Edition

Your entire Windows Event Collection environment on a single pane of glass.



Where Does This Event Come From?

This Event Is Produced By

Which Integrates with Your SIEM

Examples of 24

Search performed
Occurred: 1/11/2011 8:04:15 AM
Site: http://sp2010-sp
User: System Account
Search: query='this is a search';constraint=' site:"http://sp2010-sp" '

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Additional Resources