You are not Alone

The audit log security settings report that is run from site settings->Audit Reports->Security Settings presents an xml file that can be output into excel.  The information in the report is cryptic in a couple of couple of columns - SiteID and Event Data. 

 

 

Resolution(s):

This information is pulled from the Content DB.

Column: Event Data

Purpose:  EventData shows who the action was taken upon (user) and what group the user belonged to.

The user is found in the UserInfo table.  This field is tp_ID.

The groupid is found in the Groups table.  The field is ID.

Column: SiteID

Purpose:  This is the site collection id.

The SiteID is found in the Web table.  The field is SiteID.