Event log fields and descriptions

7-mode/HA pair/V-Series : Configuration : Protocols : CIFS : Managing CIFS auditing : Event log fields and descriptions

Field	Description
Object Server	Name of the subsystem server process calling the audit check function. This is always SECURITY, because this is a security log.
Object Type	Type of object being accessed.
Object Name	Name (such as a file name) of the object being accessed.
New Handle ID	New handle identifier of the open object.
Operation ID	Unique identifier associating multiple events resulting from a single operation.
Process ID	Identifier of the client process accessing the object.
Primary User Name	User name of the user requesting the object access. When impersonation is taking place, this is the user name with which the server process is logged on.
Primary Domain	Name of the computer, or SYSTEM, if the user identified by Primary User Name is SYSTEM. If the computer is a member of a Windows NT server domain, this can also be the name of the domain containing the primary user's account.
Primary Logon ID	Unique identifier assigned when the primary user logged in.
Object User Name	Your login name.
Client Domain	Name of your computer or the domain containing the client user's account.
Client Logon ID	Unique identifier assigned when the client user is logged in.
Accesses	Types of accesses to the object that were attempted.
Privileges	Your privileges.