| Event Id | 1643 |
| Source | Active Directory |
| Description | The last %1 hours %2 search operations were performed. %3 of them were characterized as expensive. %4 of them were characterized as inefficient. |
| Event Information | This is an Active Directory internal event. Internal events appear in Event Viewer only when the default logging level is changed. Most internal events are for informational purposes only. This event is logged when Active Directory performs the specified number of search operations within this time interval. During this time interval, the specified number of search operations were characterized as expensive or inefficient. A search is expensive if it visits more than 10 thousand (the default value) entries. A search is inefficient if it visits more than one thousand entries and returns less than 10 percent of them. |
| Reference Links | Microsoft product: Windows Operating System Version: 5.0 Event Source: Active Directory Event ID: 1643 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.