This table lists the server event log descriptions for StellarProtect
(Legacy Mode).
|
ID
|
Server Event
|
Description
|
|
1011
|
Unable to send reports
|
Unable to send scheduled reports to %email_address%.
|
|
1012
|
Unable to send notifications
|
Unable to send notifications to %email_address%.
|
|
3001
|
Purge agent event logs - automatic
|
Automatic purge of agent event logs.
|
|
3002
|
Purge agent event logs - manual
|
Manual purge of agent event logs.
|
|
3004
|
Purge server event logs - automatic
|
Automatic purge of server event logs.
|
|
3005
|
Purge server event logs - manual
|
Manual purge of server event logs.
|
|
4001
|
Take action on unapproved blocked file
|
Request sent to endpoint(s): Add blocked file to Approved List.
File name: %file_name%
File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Delete the blocked file.
File name: %file_name%
File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Ignore the blocked file.
File name: %file_name%
File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Quarantine the file.
File name: %file_name%
File hash: %file_hash% (SHA-1)
Request sent to endpoint(s): Restore the file from quarantine.
File name: %file_name%
File hash: %file_hash% (SHA-1)
|
|
4004
|
Release the quarantined malicious file
|
Request sent to endpoint(s): Restore the file from quarantine.
File name: %file_name%
File hash: %file_hash% (SHA-1)
|
|
4005
|
Delete the quarantined malicious file
|
Request sent to endpoint(s): Delete the file from quarantine.
File name: %file_name%
File hash: %file_hash% (SHA-1)
|
|
4006
|
Take action on unapproved fileless attack
|
Request sent to endpoint(s): Add blocked process chain and command
argument.
Process chain: %process_name%
Command argument: %parameter%
Request sent to endpoint(s): Ignore blocked process chain and command
argument.
Process chain: %process_name%
Command argument: %parameter%
|
|
4100
|
Login Account Added to Baseline
|
A user login account has been added to the Situational Awareness baseline.
Domain:%domain%
Account:%account%
Login type:%logon_type%
Source IP:%source_ip%
|
|
4101
|
Application Added to Baseline
|
An application has been added to the Situational Awareness baseline.
Application Path: %app_path%
|
|
5001
|
Turn Application Lockdown on
|
Turned Application Lockdown on for endpoint(s).
|
|
5002
|
Turn Application Lockdown off
|
Turned Application Lockdown off for endpoint(s).
|
|
5011
|
Add trusted file hashes
|
Added 1 trusted file hash to endpoint(s).
Added %num% trusted file hashes to endpoint(s).
|
|
5013
|
Delete approved files
|
Removed specified items from the Approved List on endpoint(s) using
SLtasks.exe. |
|
5021
|
Block access from storage devices
|
Blocked access from storage devices on endpoint(s).
|
|
5023
|
Allow access from storage devices
|
Allowed access from storage devices on endpoint(s).
|
|
5025
|
Add trusted USB device on selected endpoint(s)
|
Add trusted USB device on selected endpoint(s)
|
|
5601
|
Export agent settings
|
Exported (%file_desc%) from %endpoint_name%.
|
|
5602
|
Import agent settings
|
Imported (%file_desc%) to endpoint(s).
|
|
5700
|
Scan for malware
|
Scanned endpoint(s) for malware.
|
|
5701
|
Update agent components
|
Updated agent components on endpoint(s).
|
|
5800
|
Change agent administrator password
|
Changed password on endpoint(s).
|
|
5900
|
Update agent Approved List
|
Updated Approved List on endpoint(s).
|
|
6001
|
Deploy agent patch
|
Deploy agent patch to endpoint(s).
Patch name: %patch_name%
|
|
6101
|
Agent transferred to new StellarOne server
|
Agent transferred to new StellarOne server
|
|
6201
|
Turn Maintenance Mode on
|
Turned Maintenance Mode on for endpoint(s).
|
|
6202
|
Turn Maintenance Mode off
|
Turned Maintenance Mode off for endpoint(s).
|
|
6301
|
Deploy group policy
|
Deploy group policy.
Version: %version%.
|
|
6401
|
Set Intelligent Runtime Learning
|
Set Intelligent Runtime Learning.
Version: %policy_version%
|
|
6402
|
Set Agent Password
|
Set Agent Password.
Version: %policy_version%
|
|
6403
|
Set Schedule Scan Setting
|
Set Schedule Scan Setting.
Version: %policy_version%
|
|
6404
|
Set User-Defined Suspicious Objects
|
Set User-Defined Suspicious Objects.
Version: %policy_version%
|
|
6405
|
Set Agent Patch
|
Set Agent Patch.
Version: %policy_version%
|