Event ID - 1643

Event Id1643
SourceActive Directory
DescriptionThe last %1 hours %2 search operations were performed. %3 of them were characterized as expensive. %4 of them were characterized as inefficient.
Event InformationThis is an Active Directory internal event. Internal events appear in Event Viewer only when the default logging level is changed. Most internal events are for informational purposes only. This event is logged when Active Directory performs the specified number of search operations within this time interval. During this time interval, the specified number of search operations were characterized as expensive or inefficient. A search is expensive if it visits more than 10 thousand (the default value) entries. A search is inefficient if it visits more than one thousand entries and returns less than 10 percent of them.
Reference LinksMicrosoft product: Windows Operating System Version: 5.0 Event Source: Active Directory Event ID: 1643

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.