!!! Overview [{$pagename}] [eDirectory] moved from [XDAS] to using the [Common Event Format] ([CEF]) when [Micro Focus] acquired [ArcSight] These values were obtained from empirical [evidence] at Large Organization. _%%warning Although believed to be accurate [{$applicationname}] could not verify from [Micro Focus] documentation. %% %%table-bordered %%table-striped %%table-filter %%table-sort | [eDirectory] Operation | [CEF|Common Event Format] CODE | [DSE|Directory User Agent] Operation | ACCOUNT_UNLOCK | CEF0B035F | DSE_DELETE_VALUE | ACL_CHANGED | CEF0B0354 | DSE_ADD_VALUE | - | - | DSE_DELETE_VALUE | ADD_MEMBER | CEF0B0336 | DSE_ADD_VALUE | ADD_VALUE | CEF0B0006 | DSE_ADD_VALUE | AUTHENTICATE | CEF0B035D | DSE_AUTHENTICATE | CHANGE_PASSWORD | CEF0290067 | DSE_CHGPASS | - | CEF029006A | DSE_NMAS_LOG_SET_DIST_PWD | - | CEF0B0302 | DSE_NMAS_LOG_SET_PWD | CHANGE_SECURITY_EQUALS | CEF0B0341 | DSE_ADD_VALUE | - | - | DSE_DELETE_VALUE | CREATE_OBJECT | CEF0B0001 | DSE_ADD_ENTRY | - | CEF0B0343 | DSE_CREATE_ENTRY | DELETE_ATTRIBUTE | CEF0B0009 | DSE_DELETE_ATTRIBUTE | DELETE_MEMBER |CEF0B0337 | DSE_DELETE_VALUE | DELETE_OBJECT | CEF0B0309 | DSE_REMOVE_ENTRY | DELETE_VALUE | CEF0B0007 | DSE_DELETE_VALUE | INTRUDER_DETECTED | CEF0B0357 | DSE_ADD_VALUE | LDAP_ABANDON | CEF0B0418 | DSE_LDAP_ABANDON | LDAP_ADD | CEF0B0408 | DSE_LDAP_ADD | LDAP_ADD_RESPONSE | CEF0B0409 | DSE_LDAP_ADDRESPONSE | LDAP_BIND | CEF0B0401 | DSE_LDAP_BIND | LDAP_BIND_RESPONSE | CEF0B0402 | DSE_LDAP_BINDRESPONSE | LDAP_COMPARE | CEF0B0410 | DSE_LDAP_COMPARE | LDAP_COMPARE_RESPONSE | CEF0B0411 | DSE_LDAP_COMPARERESPONSE | LDAP_DELETE | CEF0B0414 | DSE_LDAP_DELETE | LDAP_DELETE_RESPONSE | CEF0B0415 | DSE_LDAP_DELETERESPONSE | LDAP_EXTENDED_OP | CEF0B0419 | DSE_LDAP_EXTOP | LDAP_EXTENDED_OP_RESPONSE | CEF0B0421 | DSE_LDAP_EXTOP_RESPONSE | LDAP_MODDN | CEF0B0416 | DSE_LDAP_MODDN | LDAP_MODDN_RESPONSE | CEF0B0417 | DSE_LDAP_MODDNRESPONSE | LDAP_MODIFY | CEF0B0412 | DSE_LDAP_MODIFY | LDAP_MODIFY_RESPONSE | CEF0B0413 | DSE_LDAP_MODIFYRESPONSE | LDAP_PASSWORD_MODIFY | CEF0B0424 | DSE_LDAP_PASSWDMODIFY | LDAP_UNBIND | CEF0B0403 | DSE_LDAP_UNBIND | LOGIN | CEF0B035C | DSE_ADD_ENTRYDSE_LOGIN_EX | - | - | DSE_ADD_ENTRYDSE_NMAS_LOG_FINISH_LOGIN_STATUS | LOGIN_DISABLED | CEF0B0356 | DSE_ADD_VALUE | LOGIN_ENABLED | CEF0B0355 | DSE_DELETE_VALUE | MOVE_OBJECT | CEF0B0004 | DSE_ADD_ENTRYDSE_MOVE_DEST_ENTRY | - | CEF0B0005 | DSE_ADD_ENTRYDSE_MOVE_SOURCE_ENTRY | QUERY_CREDENTIALS | CEF0290066 | DSE_NMAS_LOG_GET_DIST_PWD | - | CEF0290068 | DSE_NMAS_LOG_GET_PWD_STATUS | RENAME_OBJECT | CEF0B0003 | DSE_RENAME_ENTRY | VERIFY_PASSWORD | CEF0B030E | DSE_VERIFY_PASS !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]