| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Event ID 9300 - AppSense EM Agent - Self healing process started | AppSense.EM.10.Agent.Event.9300 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9301 - AppSense EM Agent - Self healing registry key replaced | AppSense.EM.10.Agent.Event.9301 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9302 - AppSense EM Agent - Self healing registry key removed | AppSense.EM.10.Agent.Event.9302 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9303 - AppSense EM Agent - Self healing file replaced | AppSense.EM.10.Agent.Event.9303 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9304 - AppSense EM Agent - Self healing file removed | AppSense.EM.10.Agent.Event.9304 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9305 - AppSense EM Agent - Self healing service stopped | AppSense.EM.10.Agent.Event.9305 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9306 - AppSense EM Agent - Self healing service started | AppSense.EM.10.Agent.Event.9306 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9307 - AppSense EM Agent - Self healing registry value replaced | AppSense.EM.10.Agent.Event.9307 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9308 - AppSense EM Agent - Self healing registry value removed | AppSense.EM.10.Agent.Event.9308 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9399 - AppSense EM Agent - Software is not licensed | AppSense.EM.10.Agent.Event.9399 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9400 - AppSense EM Agent - Lockdown edit control blocked drive | AppSense.EM.10.Agent.Event.9400 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9401 - AppSense EM Agent - Lockdown edit control blocked text | AppSense.EM.10.Agent.Event.9401 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9402 - AppSense EM Agent - Lockdown accelerator keys blocked | AppSense.EM.10.Agent.Event.9402 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9403 - AppSense EM Agent - Lockdown dialog blocked | AppSense.EM.10.Agent.Event.9403 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9404 - AppSense EM Agent - Lockdown MSAA access blocked | AppSense.EM.10.Agent.Event.9404 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9405 - AppSense EM Agent - User logon (legacy) action success | AppSense.EM.10.Agent.Event.9405 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9406 - AppSense EM Agent - User logon (legacy) action fail | AppSense.EM.10.Agent.Event.9406 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9407 - AppSense EM Agent - User logoff action success | AppSense.EM.10.Agent.Event.9407 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9408 - AppSense EM Agent - User logoff action fail | AppSense.EM.10.Agent.Event.9408 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9409 - AppSense EM Agent - Computer startup action success | AppSense.EM.10.Agent.Event.9409 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9410 - AppSense EM Agent - Computer startup action fail | AppSense.EM.10.Agent.Event.9410 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9413 - AppSense EM Agent - Computer network available action success | AppSense.EM.10.Agent.Event.9413 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9414 - AppSense EM Agent - Computer network available action fail | AppSense.EM.10.Agent.Event.9414 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9420 - AppSense EM Agent - User session reconnect action success | AppSense.EM.10.Agent.Event.9420 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9421 - AppSense EM Agent - User session reconnect action fail | AppSense.EM.10.Agent.Event.9421 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9422 - AppSense EM Agent - User session disconnect action success | AppSense.EM.10.Agent.Event.9422 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9423 - AppSense EM Agent - User session disconnect action fail | AppSense.EM.10.Agent.Event.9423 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9424 - AppSense EM Agent - User session locked action success | AppSense.EM.10.Agent.Event.9424 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9425 - AppSense EM Agent - User session locked action fail | AppSense.EM.10.Agent.Event.9425 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9426 - AppSense EM Agent - User session unlocked action success | AppSense.EM.10.Agent.Event.9426 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9427 - AppSense EM Agent - User session unlocked action fail | AppSense.EM.10.Agent.Event.9427 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9428 - AppSense EM Agent - Process started action success | AppSense.EM.10.Agent.Event.9428 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9429 - AppSense EM Agent - Process started action fail | AppSense.EM.10.Agent.Event.9429 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9430 - AppSense EM Agent - Process stopped action success | AppSense.EM.10.Agent.Event.9430 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9431 - AppSense EM Agent - Process stopped action fail | AppSense.EM.10.Agent.Event.9431 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9432 - AppSense EM Agent - Network connected action success | AppSense.EM.10.Agent.Event.9432 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9433 - AppSense EM Agent - Network connected action fail | AppSense.EM.10.Agent.Event.9433 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9434 - AppSense EM Agent - Network disconnected action success | AppSense.EM.10.Agent.Event.9434 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9435 - AppSense EM Agent - Network disconnected action fail | AppSense.EM.10.Agent.Event.9435 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9436 - AppSense EM Agent - User logon (pre-session) action success | AppSense.EM.10.Agent.Event.9436 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9437 - AppSense EM Agent - User logon (pre-session) action fail | AppSense.EM.10.Agent.Event.9437 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9438 - AppSense EM Agent - User logon (pre-desktop) action success | AppSense.EM.10.Agent.Event.9438 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9439 - AppSense EM Agent - User logon (pre-desktop) action fail | AppSense.EM.10.Agent.Event.9439 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9440 - AppSense EM Agent - User logon (desktop created) action success | AppSense.EM.10.Agent.Event.9440 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9441 - AppSense EM Agent - User logon (desktop created) action fail | AppSense.EM.10.Agent.Event.9441 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9480 - AppSense EM Agent - Configuration merge update | AppSense.EM.10.Agent.Event.9480 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9481 - AppSense EM Agent - Configuration merge start | AppSense.EM.10.Agent.Event.9481 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9482 - AppSense EM Agent - Configuration merge complete | AppSense.EM.10.Agent.Event.9482 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9483 - AppSense EM Agent - Configuration merge fail | AppSense.EM.10.Agent.Event.9483 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9484 - AppSense EM Agent - Configuration merge timeout | AppSense.EM.10.Agent.Event.9484 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9495 - AppSense EM Agent - Not configured | AppSense.EM.10.Agent.Event.9495 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9496 - AppSense EM Agent - Configuration unsupported | AppSense.EM.10.Agent.Event.9496 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9650 - AppSense EM Agent - Managed application start | AppSense.EM.10.Agent.Event.9650 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9651 - AppSense EM Agent - Managed application stop | AppSense.EM.10.Agent.Event.9651 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9652 - AppSense EM Agent - Personalization load error | AppSense.EM.10.Agent.Event.9652 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9653 - AppSense EM Agent - Personalization save error | AppSense.EM.10.Agent.Event.9653 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9654 - AppSense EM Agent - Blacklisted process started | AppSense.EM.10.Agent.Event.9654 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9655 - AppSense EM Agent - Personalization not saved | AppSense.EM.10.Agent.Event.9655 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9656 - AppSense EM Agent - Offline resiliency save started | AppSense.EM.10.Agent.Event.9656 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9657 - AppSense EM Agent - Offline resiliency save complete | AppSense.EM.10.Agent.Event.9657 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9658 - AppSense EM Agent - Personalization settings purged | AppSense.EM.10.Agent.Event.9658 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9659 - AppSense EM Agent - Personalization settings updated | AppSense.EM.10.Agent.Event.9659 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9660 - AppSense EM Agent - Personalization failed | AppSense.EM.10.Agent.Event.9660 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9661 - AppSense EM Agent - Timeout Communicating with Personalization Server | AppSense.EM.10.Agent.Event.9661 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9662 - AppSense EM Agent - Trigger Action Times | AppSense.EM.10.Agent.Event.9662 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9663 - AppSense EM Agent - PreCache Application Success | AppSense.EM.10.Agent.Event.9663 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9664 - AppSense EM Agent - PreCache Group Success | AppSense.EM.10.Agent.Event.9664 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9665 - AppSense EM Agent - PreCache Managed Application Failure | AppSense.EM.10.Agent.Event.9665 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9666 - AppSense EM Agent - PreCache Group Failure | AppSense.EM.10.Agent.Event.9666 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9667 - AppSense EM Agent - Personalization Profile Import | AppSense.EM.10.Agent.Event.9667 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9668 - AppSense EM Agent - Personalization Profile Export | AppSense.EM.10.Agent.Event.9668 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9670 - AppSense EM Agent - FolderRedirect EmCopy Success | AppSense.EM.10.Agent.Event.9670 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9671 - AppSense EM Agent - FolderRedirect EmCopy Fail | AppSense.EM.10.Agent.Event.9671 | AppSense.EM.10.Agent | EventCollection | True | False |
| Event ID 9680 - AppSense EM Agent - Endpoint Self Service start failure | AppSense.EM.10.Agent.Event.9680 | AppSense.EM.10.Agent | EventCollection | True | False |
| Alert ID 9483 - AppSense EM Agent - Configuration merge fail Alert | AppSense.EM.10.Agent.Event.Alrt.9483 | AppSense.EM.10.Agent | Alert | True | True |
| Alert ID 9484 - AppSense EM Agent - Configuration merge timeout Alert | AppSense.EM.10.Agent.Event.Alrt.9484 | AppSense.EM.10.Agent | Alert | True | True |
| Alert ID 9652 - AppSense EM Agent - Personalization load error Alert | AppSense.EM.10.Agent.Event.Alrt.9652 | AppSense.EM.10.Agent | Alert | True | True |
| Alert ID 9653 - AppSense EM Agent - Personalization save error Alert | AppSense.EM.10.Agent.Event.Alrt.9653 | AppSense.EM.10.Agent | Alert | True | True |
| Alert ID 9661 - AppSense EM Agent - Timeout Communicating with Personalization Server Alert | AppSense.EM.10.Agent.Event.Alrt.9661 | AppSense.EM.10.Agent | Alert | True | True |
| Alert ID 9665 - AppSense EM Agent - PreCache Managed Application Failure Alert | AppSense.EM.10.Agent.Event.Alrt.9665 | AppSense.EM.10.Agent | Alert | True | True |
| Alert ID 9666 - AppSense EM Agent - PreCache Group Failure Alert | AppSense.EM.10.Agent.Event.Alrt.9666 | AppSense.EM.10.Agent | Alert | True | True |
| Alert ID 9680 - AppSense EM Agent - Endpoint Self Service start failure Alert | AppSense.EM.10.Agent.Event.Alrt.9680 | AppSense.EM.10.Agent | Alert | True | True |