You can send notifications to a URL of your choosing when a specific event in Workspace ONE UEM occurs. Use the Event Notifications page to assign notifications to device-related events captured in real time.

What can you do with Event Notification System Settings

Workspace ONE UEM event notifications use HTTP URLs and basic user authentication method. Workspace ONE UEM supports notifications for specific events using Webhooks/Event Notification.

Webhooks are HTTP callbacks, sent to the URL of your choosing whenever the specified event occurs. You provide the URL as the callback destination after subscribing to the particular event. Additionally, because callbacks are returned to the specified URL every time an applicable event occurs, you do not need to regularly poll the server for event information.

Note: The Event Notification log file is called ChangeEventOutboundQueueService.Log and it can be found in the Logs/Services folder where Workspace ONE UEM is installed.

To access the Hub URLs Settings navigate to Groups & Settings > All Settings > System > Advanced > API > Event Notifications.

Determine your Organization group hierarchy

Before you review and modify the settings, understand the two types of inheritance/override options for the organization group hierarchy available at the top and bottom of the settings page and determine your choice. For more information about these settings, see Override Versus Inherit Setting for Organization Groups.
  • Current Setting – Select whether to Inherit or Override the displayed settings. Inherit means use the settings of the current organization group's parent OG, while Override enables the settings for editing so you can modify the current OG's settings directly.
  • Child Permission – Select the available behavior of child organization groups that exist below the currently selected organization group. Inherit only means child OGs are only allowed to inherit these settings. Override only means they override the settings, and Inherit or Override means you can choose to inherit or override settings in child OGs that exist below the currently selected OG.

To add a notification and tie it to an event, navigate to Groups & Settings > All Settings > System > Advanced > API > Event Notifications and select the Add Rule button.

The Add Event Notification screen displays. It is comprised of two sections.

  1. You must complete the following settings to define where the notification is directed and which user account authorizes it.
    Setting Description
    Target Name This is the label for the event notification. You can see this entry in the Event Notifications page.
    Target URL Enter the target URL which is configured to receive the webhook callback.
    User Name Enter the Workspace ONE UEM user name.
    Password / Confirm Password Enter and confirm the password that corresponds to the Workspace ONE UEM user name.
    Format Select the format for the webhook callback: JSON or XML.
  2. The Events section determines what future events trigger the notification you have defined above.
    Setting Description

    Send a notification when a multi-user device is checked-in or checked-out.

    In order for multi user check in / check out notification to function as designed, the device event severity level must be set to Information level or above. You can change this setting by navigating to All Settings / Admin / Events.

    Device Attribute Change

    Enable to activate the Device Attribute submenu, making it possible to enable individual device identifiers to trigger a notification when they are altered.

    Supported Attributes

    • Asset Number
    • Device Friendly Name
    • Device MCC
    • Ownership
    • Organization Group ID
    • Operating System
    • Phone Number
    • User Email Address
    Device Compliance Status Change Send a notification when the compliance status of a device changes.
    Device Compromised Status Change Send a notification when the compromised status of a device changes, specifically when an Android device is "rooted" or when an iOS device is "jailbroken".
    Device Delete Send a notification when a device is deleted from Workspace ONE UEM.
    Device Enrollment Send a notification when a device enrolls into either the Workspace ONE Intelligent Hub or Workspace ONE UEM.
    Device Unenrolled Enterprise Wipe Send a notification when a device is enterprise wiped.
    Device Wipe Send a notification when a device is wiped.

For more information on detailed configuration part, refer to VMware AirWatch API Event Notification Guide, available on