Server Event Log Descriptions Parent topic

To display the Server Events screen, go to Logs & ReportsServer Events in the navigation at the top of the web console.

Server Event Log Descriptions

Event ID
Server Event
Description
1001
Log on console
Logged on web console.
1002
Log off console
Logged off web console.
1003
Session timeout
Web console session timed out. Account '%user_name%' was logged off automatically .
1011
Unable to send reports
Unable to send scheduled reports to %email_address%.
1012
Unable to send notifications
Unable to send notifications to %email_address%.
2001
Create account
Created Intelligent Manager account '%user_name%'.
2002
Delete account
Deleted Intelligent Manager account '%user_name%'.
2003
Modify account
Modified Intelligent Manager account '%user_name%' %field_name%.
3001
Purge agent event logs -automatic
Automatic purge of agent event logs.
3002
Purge agent event logs -manual
Manual purge of agent event logs.
3003
Back up agent event logs
Automatic back up of agent event logs. Path: %filepath%.
3004
Purge server event logs -automatic
Automatic purge of server event logs.
3005
Purge server event logs -manual
Manual purge of server event logs.
3006
Back up server event logs
Automatic back up of server event logs. Path: %filepath%.
4001
Take action on unapproved blocked file
Request sent to endpoint(s): Add blocked file to Approved List. File name: %file_name% File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Delete the blocked file. File name: %file_name% File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Ignore the blocked file. File name: %file_name% File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Quarantine the file. File name: %file_name% File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Restore the file from quarantine. File name: %file_name% File hash: %file_hash% (SHA-1)
4002
Mark as closed
Marked %num% event(s) closed.
4003
Mark as open
Marked %num% event(s) opened.
4004
Release the quarantined malicious file
Request sent to endpoint(s): Restore the file from quarantine. File name: %file_name% File hash: %file_hash% (SHA-1)
4005
Delete the quarantined malicious file
Request sent to endpoint(s): Delete the file from quarantine. File name: %file_name% File hash: %file_hash% (SHA-1)
4006
Take action on unapproved fileless attack
Request sent to endpoint(s): Add blocked process chain and command argument. Process chain: %process_name% Command argument: %parameter%
Request sent to endpoint(s): Ignore blocked process chain and command argument. Process chain: %process_name% Command argument: %parameter%
5001
Turn Application Lockdown on
Turned Application Lockdown on for endpoint(s).
5002
Turn Application Lockdown off
Turned Application Lockdown off for endpoint(s).
5011
Add trusted file hashes
Added 1 trusted file hash to endpoint(s).
Added %num% trusted file hashes to endpoint(s).
5013
Delete approved files
Removed specified items from the Approved List on endpoint(s) using SLtasks.exe.
5021
Block access from storage devices
Blocked access from storage devices on endpoint(s).
5023
Allow access from storage devices
Allowed access from storage devices on endpoint(s).
5025
Add trusted USB device
Add trusted USB device on selected endpoint(s)
5601
Export agent settings
Exported (%file_desc%) from %endpoint_name%.
5602
Import agent settings
Imported (%file_desc%) to endpoint(s).
5800
Change agent administrator password
Changed password on endpoint(s).
5700
Scan for malware
Scanned endpoint(s) for malware.
5701
Update agent components
Updated agent components on endpoint(s).
5900
Update agent Approved List
Updated Approved List on endpoint(s).
6001
Deploy agent patch
Deploy agent patch to endpoint(s). Patch name: %patch_name%
6101
Agent transfer
Agent transferred to new Intelligent Manager server
6201
Turn Maintenance Mode on
Turned Maintenance Mode on for endpoint(s).
6202
Turn Maintenance Mode off
Turned Maintenance Mode off for endpoint(s).