!!! Overview [{$pagename}] [eDirectory] moved from [XDAS] to using the [Common Event Format] ([CEF]) when [Micro Focus] acquired [ArcSight] These values were obtained from empirical [evidence] at Large Organization. _%%warning Although believed to be accurate [{$applicationname}] could not verify from [Micro Focus] documentation. %% %%zebra-table %%table-sort %%table-filter %%table-bordered | [CEF|Common Event Format] CODE | [DSE|Directory User Agent] Operation | [LDAP] Operation (Closest) | CEF0290066 | DSE_NMAS_LOG_GET_PWD_STATUS | [QUERY_CREDENTIALS|SearchRequest] | CEF0290067 | DSE_NMAS_LOG_SET_DIST_PWD | [CHANGE_PASSWORD|Modify Response] | CEF0290068 | DSE_NMAS_LOG_GET_DIST_PWD | [QUERY_CREDENTIALS|SearchRequest] | CEF029006A | DSE_NMAS_LOG_SET_PWD | [CHANGE_PASSWORD|Modify Response] | CEF0B0001 | DSE_CREATE_ENTRY | [CREATE_OBJECT|Add Response] | CEF0B0003 | DSE_RENAME_ENTRY | [RENAME_OBJECT|Modify DN Response] | CEF0B0004 | DSE_MOVE_SOURCE_ENTRY | [MOVE_OBJECT|Modify DN Response] | CEF0B0006 | DSE_ADD_VALUE | [ADD_VALUE|Modify Response] | CEF0B0007 | DSE_DELETE_VALUE | [DELETE_VALUE|Modify Response] | CEF0B0009 | DSE_DELETE_ATTRIBUTE | [DELETE_ATTRIBUTE|Modify Response] (Removal of all values) | CEF0B0302 | DSE_CHGPASS | [CHANGE_PASSWORD|Modify Response] | CEF0B0309 | DSE_REMOVE_ENTRY | [DELETE_OBJECT|Delete Response] | CEF0B030E | DSE_VERIFY_PASS | [VERIFY_PASSWORD] | CEF0B0336 | DSE_ADD_VALUE | [ADD_MEMBER|Modify Response] | CEF0B0337 | DSE_DELETE_VALUE | [DELETE_MEMBER|Modify Response] | CEF0B0341 | DSE_DELETE_VALUE | [CHANGE_SECURITY_EQUALS|Modify Response] [ACL (eDirectory Attribute)] | CEF0B0343 | DSE_ADD_ENTRY | [CREATE_OBJECT|Add Response] | CEF0B0354 | DSE_ADD_VALUE | [ACL_CHANGED|Modify Response] | CEF0B0355 | DSE_DELETE_VALUE | [LOGIN_ENABLED|LoginDisabled] | CEF0B0356 | DSE_ADD_VALUE | [LOGIN_DISABLED|LoginDisabled] | CEF0B0357 | DSE_ADD_VALUE | [INTRUDER_DETECTED|Intruder Detection] | CEF0B035C | DSE_NMAS_LOG_FINISH_LOGIN_STATUS | [LOGIN|Bind Response] | CEF0B035D | DSE_AUTHENTICATE | [AUTHENTICATE|Bind Response] | CEF0B035F | DSE_DELETE_VALUE | [ACCOUNT_UNLOCK] | CEF0B0401 | DSE_LDAP_BIND | [LDAP_BIND|Bind Request] | CEF0B0402 | DSE_LDAP_BINDRESPONSE | [LDAP_BIND_RESPONSE|Bind Response] | CEF0B0403 | DSE_LDAP_UNBIND | [LDAP_UNBIND|Unbind Request] | CEF0B0408 | DSE_LDAP_ADD | [LDAP_ADD|Add Request] | CEF0B0409 | DSE_LDAP_ADDRESPONSE | [LDAP_ADD_RESPONSE|Add Response] | CEF0B0410 | DSE_LDAP_COMPARE | [LDAP_COMPARE|Compare Request] | CEF0B0411 | DSE_LDAP_COMPARERESPONSE | [LDAP_COMPARE_RESPONSE|Compare Response] | CEF0B0412 | DSE_LDAP_MODIFY | [LDAP_MODIFY|Modify Request] | CEF0B0413 | DSE_LDAP_MODIFYRESPONSE | [LDAP_MODIFY_RESPONSE|Modify Response] | CEF0B0414 | DSE_LDAP_DELETE | [LDAP_DELETE|Delete Request] | CEF0B0415 | DSE_LDAP_DELETERESPONSE | [LDAP_DELETE_RESPONSE|Delete Response] | CEF0B0416 | DSE_LDAP_MODDN | [LDAP_MODDN|ModifyDNRequest] | CEF0B0417 | DSE_LDAP_MODDNRESPONSE | [LDAP_MODDN_RESPONSE|Modify DN Response] | CEF0B0418 | DSE_LDAP_ABANDON | [LDAP_ABANDON|Abandon Request] | CEF0B0419 | DSE_LDAP_EXTOP | [LDAP_EXTENDED_OP|Extended Request] | CEF0B0421 | DSE_LDAP_EXTOP_RESPONSE | [LDAP_EXTENDED_OP_RESPONSE|Extended Response] | CEF0B0424 | DSE_LDAP_PASSWDMODIFY | LDAP_PASSWORD_MODIFY /% /% /% !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]