This table lists all General Management events and their unique subtypes specific to this release of App Control.

Note: New or changed events are identified with ** (double-asterisk) in the left column. This allows a search to quickly identify only the new or changed events.
Table 1. General Management Events and Subtypes
Subtype ID No. Severity Example Descriptions/Comments
Agent diagnostics available 1117 Info

Host '$computer$' generated automatic diagnostics '$param1$'.

Note: Param1 is the name of the zip file for the diagnostic package, with timestamp in the name.
Alert created 1101 Info Alert '$alertname$' was created by '$username$'.
Alert deleted 1102 Info Alert '$alertname$' was deleted by '$username$'.
Alert modified 1103 Info Alert '$alertname$' was modified by '$username$'.
Alert reset 1105 Info Alert '$alertname$' was cleared by '$username$'.
Alert triggered 1104

Critical

/Error/

Warning

$alertname$: $alertmessage$

Examples:

Revoked Certificate Alert: Certificate with subject 'New App Corp Digital ID-1' was revoked for publisher 'New App Corp'

Backup Missed Alert: Scheduled database backup was not performed.

Note: Previously, Notice was the severity for all alerts. Now it is: Critical for High priority alerts; Error for Medium priority alerts; Warning for Low priority alerts.
Baseline Drift Report created 1106 Info

Baseline Drift Report '$reportname$' has been created by '$userName$'.
Baseline Drift Report deleted 1108 Info

Baseline Drift Report '$reportname$' has been deleted by '$userName$'.
Baseline Drift Report generated 1109 Info

Baseline Drift Report '$reportname$' has been generated.
Baseline Drift Report generation is slow 1113 Warning

Drift report $reportlink$ is taking a long time to generate. You may want to consider modifying your target or setting the report size to summary only.

Note: Report name is a link in this description.
Baseline Drift Report modified 1107 Info

Baseline Drift Report '$reportname$' has been modified by '$userName$'.
Event Rule created 1114 Info

Event Rule '$ruleName$' has been created by '$userName$'.
Event Rule deleted 1116 Info

Event Rule '$ruleName$' has been deleted by '$userName$'.
Event Rule modified 1115 Info

Event Rule '$ruleName$' has been modified by '$userName$'.

Event Rule '$ruleName$' was disabled because analysis target is no longer valid.

Event Rule 'ruleName$' was disabled because file uploads are no longer allowed.
Meter created 632 Info

Meter '$param1$' for ‘$fileName$’ was created by '$username$'.

Note: Type was incorrectly identified as Policy Management in previous editions of this document.
Meter deleted 633 Info Meter '$param1$' for ‘$fileName$’ was deleted by '$username$'.
Meter modified 634 Info Meter '$param1$' for ‘$fileName$’ was modified by '$username$'.
Saved view cached 1118 Info

Saved view '$param1$'[id='$param2$'] selected for caching by user '$username$'.

Note: This event occurs when a user requests that the current Events page view be cached.
Saved view cache removed 1119 Info

Saved view '$param1$'[id='$param2$'] removed from caching by user '$username$'.

Note: This event occurs when a Cached Events view is removed from the Cached Events page, which also removes it from further nightly processing.
Saved view cache generation started 1120 Info

Cached view '$param1$' [id='$param2$'] generation started.

Note: This event occurs when a Events page view that is queued for generation begins processing.
Saved view cache generation complete 1121 Info

Cached view '$param1$' [id='$param2$'] generation complete.

Note: This event occurs when an Events page view queued for caching has been processed and is available on the Cached Events page in the console.
Snapshot created 1110 Info Snapshot '$snapshotName$' has been created by '$userName$'.
Snapshot deleted 1112 Info Snapshot '$ snapshotName $' has been deleted by '$userName$'.
Snapshot modified 1111 Info Snapshot '$ snapshotName $' has been modified by '$userName$'.