SharePoint log types - v8.6.0

SITE

Site - The GUID of the site where the file or folder accessed by the user is located.

ITEMTYPE

ItemType - The type of object that was accessed or modified.
See the ItemType table for details on the types of objects.

EVENTSOURCE

EventSource - Identifies that an event occurred in SharePoint.
Possible values are SharePoint or ObjectModel.

SOURCENAME

SourceName - The entity that triggered the audited operation.
Possible values are SharePoint or ObjectModel.

USERAGENT

UserAgent - Information about the user's client or browser.
This information is provided by the client or browser.

MACHINEDOMAININFO

MachineDomainInfo - Information about device sync operations.
This information is reported only if it's present in the request.

MACHINEID

MachineId - Information about device sync operations.
This information is reported only if it's present in the request.

APPACCESSCTX

AppAccessContext - Field that contains sub-fields:

• ClientAppId

• ClientAppName

• CorrelationId

• AADSessionId

APPDISPLAYNAME

ApplicationDisplayName - No available documentation for this field.

APPID

ApplicationId - No available documentation for this field.

CORRELATIONID

CorrelationId - No available documentation for this field.