search identity audit help

[ab@novell.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The only options left are sev 0 events and (if you didn't have them
selected) Internal events. If not those then you are probably causing
events that NIA does not support (custom events).

Good luck.






jason2329 wrote:
> I have a need to create a attrubute change rule. I did a search on
> sev:[1 TO 5] but I do not see teh events the customer made changes so I
> woudl see them. What do I search on to see them
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJKwn5rAAoJEF+XTK08PnB5siQQAIqA38z5IY foNCEsETS948mS
HwrcD88LogHjLpyFz3WqS6BbogQsD0dhByFeMkga/A7Z162N/6ECE7atytT3naox
K6psoPzznXDHjl2ubHbzUwHyLSRVTfaAchECRWfrXn6cc8CMNZ nSJzRNzgfuMWbW
9Qt4wDs9Grw/K1EEx8q7XnyTBjZWlFazVpuM/0TU4AtnaLS2Z89UuuLeAaS5SmTD
9i8ybv58HINNk0gtedZhJAlsOz55bPUL92ijmdZtVixj4U/f3TX/thD2IUtUQEJ+
c7NT5SGmIFe3ZhzcbCf4FLtwiqrJhYCCaTnYRpz8nhRag9ApZw iJZmK1IyaFgOrb
VTPKivVpraQcASWS4LrRp2Ciit+xJHN/WF++9dQBTJd//h7kT1exmcr+2TkZUuEn
VTAwfCgOeOJxbpXNl4Btr6iUIv+07EMkHNebtq0jk2Xsn/RqougM60Ttu83We/8G
pNZnOv5mZw5qq3jSTM5WMQXtvfl6/KpbkK2HStyvX3jCCZ3WCmNuOEgHdk6upHc5
BvA1b7s7SFbI8DfxPGK8sLV2OzmM4wXxL082Y1Q9CC5XoDM2Vf t/0XrOZ+l2cEoM
+SkVefUaYWkLIqs4yxV46MITaqNG55ZMD4FNMmiv3Gvy7nU6bB XkV0CMAWcUexGB
muJax3j2iTi5DFRN2x/V
=DpUt
-----END PGP SIGNATURE-----