3.1.1.1.26.2.1 SearchConfigurationAuditTable
The SearchConfigurationAuditTable procedure can be used to search the ADM_ConfigurationAuditTable based on certain criteria.
It takes the following input parameters:
Param_searchCriteriaXml: This is the filter condition in the form of XML as specified in section 2.2.4.66.
Param_numberOfRows: This specifies the maximum number of rows to be returned as a part of Result_events.
The following is the output parameter of this procedure.
Result_events: This is a collection of configuration change events that meet the specified filter condition.
The following are the processing steps involved:
Convert Param_searchCriteriaXml into an implementation-specific filter condition that can be used to query the table mentioned previously. The EventParameters being an XML string that is composed of the event data, the search will also need to be performed within the XML.
The Type specified in ConfigurationAuditEnumerationParameters.SearchFilterCriteria specifies the ServerType and whether it is for a DHCP or IPAM-specific event.
The following table specifies the mapping between the fields in ConfigurationAuditEnumerationParameters (section 2.2.4.66) and the fields in ConfigurationAuditRecord.
Name
EventDetails Mapping
IP_ADDRESS
EventParameters
IP_ADDRESS_RANGE_ID
EventParameters
IP_BLOCK_ID
EventParameters
CUSTOM_FIELD_NAME
EventParameters
LOGICAL_GROUP_NAME
EventParameters
SCOPE_NAME
EventParameters
SCOPE_ID
EventParameters
OPTION_ID
EventParameters
OPTION_NAME
EventParameters
RESERVATION_ADDRESS
EventParameters
EVENT_ID
EventID
SERVER_NAME
ServerName
KEYWORDS
Keywords
OPCODE
Opcode
TIME_OF_EVENT
TimeOfEvent
USER_NAME
UserName
USER_DOMAIN_NAME
UserDomainName
FOREST_NAME
ForestName
TASK_CATEGORY
TaskCategory
DESCRIPTION
EventDescription
Enumerate rows based on the filter criteria constructed above with no more than Param_numberOfRows being processed. For each row meeting the specified filter condition:
Create an instance of ConfigurationAuditRecord.
Copy the RecordId and EventDetails.
Add the instance to Result_events.
Return Result_events as the output parameter of this procedure.