Hi community,
Currently, I am not able to see the creation or deletion of user account events in the Carbon Black logs.
I am not sure if I will need to enable anything in order to see the creation or deletion of the user accounts in the Carbon Black logs.
Thank you for your help.
It is reported that to view the creation or deletion of user accounts in VMware Carbon Black, you will need to enable the following logs:
To enable these logs, you may need to:
Once you have enabled these logs, viewing records of the created or deleted user accounts in the VMware Carbon Black would be possible.
Here are some additional things to keep in mind:
I hope this helps!