The description field is a natural language description of the event. Often, the description will contain information also provided in other fields in the event. This redundancy is intentional; it allows the description to be fully descriptive of the event without the other fields.
You can find the event types and subtypes nested under Event Tables. Each event type has a specific table that describes the sub-types and events as they appear in this version of App Control. This includes examples (or formats) of descriptions for each unique event subtype, but it does not enumerate all possible event descriptions. Where descriptions contain error messages and other unrestricted content, an exhaustive list is impractical.
Note: Because it can contain sensitive information, including passwords, command line information is included in the Description field for Syslog output from the App Control Server only if command line export is enabled on the System Configuration/Events page in the App Control Console.