System
The system category contains events that are related to system changes, software installation, or status messages.
The following table describes the low-level event categories and associated severity levels for the system category.
Low-level event category |
Category ID |
Description |
Severity level (0 - 10) |
---|---|---|---|
Unknown System Event |
8001 |
Indicates an unknown system event. |
1 |
System Boot |
8002 |
Indicates a system restart. |
1 |
System Configuration |
8003 |
Indicates a change in the system configuration. |
1 |
System Halt |
8004 |
Indicates that the system was halted. |
1 |
System Failure |
8005 |
Indicates a system failure. |
6 |
System Status |
8006 |
Indicates any information event. |
1 |
System Error |
8007 |
Indicates a system error. |
3 |
Misc System Event |
8008 |
Indicates a miscellaneous system event. |
1 |
Service Started |
8009 |
Indicates that system services started. |
1 |
Service Stopped |
8010 |
Indicates that system services stopped. |
1 |
Service Failure |
8011 |
Indicates a system failure. |
6 |
Successful Registry Modification |
8012 |
Indicates that a modification to the registry was successful. |
1 |
Successful Host-Policy Modification |
8013 |
Indicates that a modification to the host policy was successful. |
1 |
Successful File Modification |
8014 |
Indicates that a modification to a file was successful. |
1 |
Successful Stack Modification |
8015 |
Indicates that a modification to the stack was successful. |
1 |
Successful Application Modification |
8016 |
Indicates that a modification to the application was successful. |
1 |
Successful Configuration Modification |
8017 |
Indicates that a modification to the configuration was successful. |
1 |
Successful Service Modification |
8018 |
Indicates that a modification to a service was successful. |
1 |
Failed Registry Modification |
8019 |
Indicates that a modification to the registry failed. |
1 |
Failed Host-Policy Modification |
8020 |
Indicates that a modification to the host policy failed. |
1 |
Failed File Modification |
8021 |
Indicates that a modification to a file failed. |
1 |
Failed Stack Modification |
8022 |
Indicates that a modification to the stack failed. |
1 |
Failed Application Modification |
8023 |
Indicates that a modification to an application failed. |
1 |
Failed Configuration Modification |
8024 |
Indicates that a modification to the configuration failed. |
1 |
Failed Service Modification |
8025 |
Indicates that a modification to the service failed. |
1 |
Registry Addition |
8026 |
Indicates that a new item was added to the registry. |
1 |
Host-Policy Created |
8027 |
Indicates that a new entry was added to the registry. |
1 |
File Created |
8028 |
Indicates that a new was created in the system. |
1 |
Application Installed |
8029 |
Indicates that a new application was installed on the system. |
1 |
Service Installed |
8030 |
Indicates that a new service was installed on the system. |
1 |
Registry Deletion |
8031 |
Indicates that a registry entry was deleted. |
1 |
Host-Policy Deleted |
8032 |
Indicates that a host policy entry was deleted. |
1 |
File Deleted |
8033 |
Indicates that a file was deleted. |
1 |
Application Uninstalled |
8034 |
Indicates that an application was uninstalled. |
1 |
Service Uninstalled |
8035 |
Indicates that a service was uninstalled. |
1 |
System Informational |
8036 |
Indicates system information. |
3 |
System Action Allow |
8037 |
Indicates that an attempted action on the system was authorized. |
3 |
System Action Deny |
8038 |
Indicates that an attempted action on the system was denied. |
4 |
Cron |
8039 |
Indicates a crontab message. |
1 |
Cron Status |
8040 |
Indicates a crontab status message. |
1 |
Cron Failed |
8041 |
Indicates a crontab failure message. |
4 |
Cron Successful |
8042 |
Indicates a crontab success message. |
1 |
Daemon |
8043 |
Indicates a daemon message. |
1 |
Daemon Status |
8044 |
Indicates a daemon status message. |
1 |
Daemon Failed |
8045 |
Indicates a daemon failure message. |
4 |
Daemon Successful |
8046 |
Indicates a daemon success message. |
1 |
Kernel |
8047 |
Indicates a kernel message. |
1 |
Kernel Status |
8048 |
Indicates a kernel status message. |
1 |
Kernel Failed |
8049 |
Indicates a kernel failure message. |
|
Kernel Successful |
8050 |
Indicates a kernel successful message. |
1 |
Authentication |
8051 |
Indicates an authentication message. |
1 |
Information |
8052 |
Indicates an informational message. |
2 |
Notice |
8053 |
Indicates a notice message. |
3 |
Warning |
8054 |
Indicates a warning message. |
5 |
Error |
8055 |
Indicates an error message. |
7 |
Critical |
8056 |
Indicates a critical message. |
9 |
Debug |
8057 |
Indicates a debug message. |
1 |
Messages |
8058 |
Indicates a generic message. |
1 |
Privilege Access |
8059 |
Indicates that privilege access was attempted. |
3 |
Alert |
8060 |
Indicates an alert message. |
9 |
Emergency |
8061 |
Indicates an emergency message. |
9 |
SNMP Status |
8062 |
Indicates an SNMP status message. |
1 |
FTP Status |
8063 |
Indicates an FTP status message. |
1 |
NTP Status |
8064 |
Indicates an NTP status message. |
1 |
Access Point Radio Failure |
8065 |
Indicates an access point radio failure. |
3 |
Encryption Protocol Configuration Mismatch |
8066 |
Indicates an encryption protocol configuration mismatch. |
3 |
Client Device or Authentication Server Misconfigured |
8067 |
Indicates that a client device or authentication server was not configured properly. |
5 |
Hot Standby Enable Failed |
8068 |
Indicates a hot standby enable failure. |
5 |
Hot Standby Disable Failed |
8069 |
Indicates a hot standby disable failure. |
5 |
Hot Standby Enabled Successfully |
8070 |
Indicates that hot standby was enabled successfully. |
1 |
Hot Standby Association Lost |
8071 |
Indicates that a hot standby association was lost. |
5 |
MainMode Initiation Failure |
8072 |
Indicates MainMode initiation failure. |
5 |
MainMode Initiation Succeeded |
8073 |
Indicates that the MainMode initiation was successful. |
1 |
MainMode Status |
8074 |
Indicates a MainMode status message was reported. |
1 |
QuickMode Initiation Failure |
8075 |
Indicates that the QuickMode initiation failed. |
5 |
Quickmode Initiation Succeeded |
8076 |
Indicates that the QuickMode initiation was successful. |
1 |
Quickmode Status |
8077 |
Indicates a QuickMode status message was reported. |
1 |
Invalid License |
8078 |
Indicates an invalid license. |
3 |
License Expired |
8079 |
Indicates an expired license. |
3 |
New License Applied |
8080 |
Indicates a new license applied. |
1 |
License Error |
8081 |
Indicates a license error. |
5 |
License Status |
8082 |
Indicates a license status message. |
1 |
Configuration Error |
8083 |
Indicates that a configuration error was detected. |
5 |
Service Disruption |
8084 |
Indicates that a service disruption was detected. |
5 |
EPS or FPM allocation exceeded |
8085 |
Indicates that the license pool allocations for EPS or FPM were exceeded. |
3 |
Performance Status |
8086 |
Indicates that the performance status was reported. |
1 |
Performance Degradation |
8087 |
Indicates that the performance is being degraded. |
4 |
Misconfiguration |
8088 |
Indicates that an incorrect configuration was detected. |
5 |