|
Event ID
|
Server Event
|
Description
|
|---|---|---|
|
1001
|
Log on console
|
Logged on web console.
|
|
1002
|
Log off console
|
Logged off web console.
|
|
1003
|
Session timeout
|
Web console session timed out. Account '%user_name%' was logged off automatically
.
|
|
1011
|
Unable to send reports
|
Unable to send scheduled reports to %email_address%.
|
|
1012
|
Unable to send notifications
|
Unable to send notifications to %email_address%.
|
|
2001
|
Create account
|
Created Intelligent Manager account '%user_name%'.
|
|
2002
|
Delete account
|
Deleted Intelligent Manager account '%user_name%'.
|
|
2003
|
Modify account
|
Modified Intelligent Manager account '%user_name%' %field_name%.
|
|
3001
|
Purge agent event logs -automatic
|
Automatic purge of agent event logs.
|
|
3002
|
Purge agent event logs -manual
|
Manual purge of agent event logs.
|
|
3003
|
Back up agent event logs
|
Automatic back up of agent event logs. Path: %filepath%.
|
|
3004
|
Purge server event logs -automatic
|
Automatic purge of server event logs.
|
|
3005
|
Purge server event logs -manual
|
Manual purge of server event logs.
|
|
3006
|
Back up server event logs
|
Automatic back up of server event logs. Path: %filepath%.
|
|
4001
|
Take action on unapproved blocked file
|
Request sent to endpoint(s): Add blocked file to Approved
List. File name: %file_name% File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Delete the blocked file. File
name: %file_name% File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Ignore the blocked file. File
name: %file_name% File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Quarantine the file. File
name: %file_name% File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Restore the file from
quarantine. File name: %file_name% File hash: %file_hash% (SHA-1)
|
|
4002
|
Mark as closed
|
Marked %num% event(s) closed.
|
|
4003
|
Mark as open
|
Marked %num% event(s) opened.
|
|
4004
|
Release the quarantined malicious file
|
Request sent to endpoint(s): Restore the file from quarantine. File name:
%file_name% File hash: %file_hash% (SHA-1)
|
|
4005
|
Delete the quarantined malicious file
|
Request sent to endpoint(s): Delete the file from quarantine. File name:
%file_name% File hash: %file_hash% (SHA-1)
|
|
4006
|
Take action on unapproved fileless attack
|
Request sent to endpoint(s): Add blocked process chain and
command argument. Process chain: %process_name% Command argument: %parameter%
Request sent to endpoint(s): Ignore blocked process chain
and command argument. Process chain: %process_name% Command argument: %parameter%
|
|
5001
|
Turn Application Lockdown on
|
Turned Application Lockdown on for endpoint(s).
|
|
5002
|
Turn Application Lockdown off
|
Turned Application Lockdown off for endpoint(s).
|
|
5011
|
Add trusted file hashes
|
Added 1 trusted file hash to endpoint(s).
Added %num% trusted file hashes to endpoint(s).
|
|
5013
|
Delete approved files
|
Removed specified items from the Approved List on endpoint(s) using SLtasks.exe.
|
|
5021
|
Block access from storage devices
|
Blocked access from storage devices on endpoint(s).
|
|
5023
|
Allow access from storage devices
|
Allowed access from storage devices on endpoint(s).
|
|
5025
|
Add trusted USB device
|
Add trusted USB device on selected endpoint(s)
|
|
5601
|
Export agent settings
|
Exported (%file_desc%) from %endpoint_name%.
|
|
5602
|
Import agent settings
|
Imported (%file_desc%) to endpoint(s).
|
|
5800
|
Change agent administrator password
|
Changed password on endpoint(s).
|
|
5700
|
Scan for malware
|
Scanned endpoint(s) for malware.
|
|
5701
|
Update agent components
|
Updated agent components on endpoint(s).
|
|
5900
|
Update agent Approved List
|
Updated Approved List on endpoint(s).
|
|
6001
|
Deploy agent patch
|
Deploy agent patch to endpoint(s). Patch name: %patch_name%
|
|
6101
|
Agent transfer
|
Agent transferred to new Intelligent Manager server
|
|
6201
|
Turn Maintenance Mode on
|
Turned Maintenance Mode on for endpoint(s).
|
|
6202
|
Turn Maintenance Mode off
|
Turned Maintenance Mode off for endpoint(s).
|