| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Event ID 9300 - AppSense EM Agent - Self healing process started | AppSense.EM.8.Agent.Event.9300 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9301 - AppSense EM Agent - Self healing registry key replaced | AppSense.EM.8.Agent.Event.9301 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9302 - AppSense EM Agent - Self healing registry key removed | AppSense.EM.8.Agent.Event.9302 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9303 - AppSense EM Agent - Self healing file replaced | AppSense.EM.8.Agent.Event.9303 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9304 - AppSense EM Agent - Self healing file removed | AppSense.EM.8.Agent.Event.9304 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9305 - AppSense EM Agent - Self healing service stopped | AppSense.EM.8.Agent.Event.9305 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9306 - AppSense EM Agent - Self healing service started | AppSense.EM.8.Agent.Event.9306 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9307 - AppSense EM Agent - Self healing registry value replaced | AppSense.EM.8.Agent.Event.9307 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9308 - AppSense EM Agent - Self healing registry value removed | AppSense.EM.8.Agent.Event.9308 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9399 - AppSense EM Agent - Software is not licensed | AppSense.EM.8.Agent.Event.9399 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9400 - AppSense EM Agent - Lockdown edit control blocked drive | AppSense.EM.8.Agent.Event.9400 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9401 - AppSense EM Agent - Lockdown edit control blocked text | AppSense.EM.8.Agent.Event.9401 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9402 - AppSense EM Agent - Lockdown accelerator keys blocked | AppSense.EM.8.Agent.Event.9402 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9403 - AppSense EM Agent - Lockdown dialog blocked | AppSense.EM.8.Agent.Event.9403 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9404 - AppSense EM Agent - Lockdown MSAA access blocked | AppSense.EM.8.Agent.Event.9404 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9405 - AppSense EM Agent - User logon action success | AppSense.EM.8.Agent.Event.9405 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9406 - AppSense EM Agent - User logon action fail | AppSense.EM.8.Agent.Event.9406 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9407 - AppSense EM Agent - User logoff action success | AppSense.EM.8.Agent.Event.9407 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9408 - AppSense EM Agent - User logoff action fail | AppSense.EM.8.Agent.Event.9408 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9409 - AppSense EM Agent - Computer startup action success | AppSense.EM.8.Agent.Event.9409 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9410 - AppSense EM Agent - Computer startup action fail | AppSense.EM.8.Agent.Event.9410 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9420 - AppSense EM Agent - User session reconnect action success | AppSense.EM.8.Agent.Event.9420 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9421 - AppSense EM Agent - User session reconnect action fail | AppSense.EM.8.Agent.Event.9421 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9422 - AppSense EM Agent - User session disconnect action success | AppSense.EM.8.Agent.Event.9422 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9423 - AppSense EM Agent - User session disconnect action fail | AppSense.EM.8.Agent.Event.9423 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9424 - AppSense EM Agent - User session locked action success | AppSense.EM.8.Agent.Event.9424 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9425 - AppSense EM Agent - User session locked action fail | AppSense.EM.8.Agent.Event.9425 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9426 - AppSense EM Agent - User session unlocked action success | AppSense.EM.8.Agent.Event.9426 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9427 - AppSense EM Agent - User session unlocked action fail | AppSense.EM.8.Agent.Event.9427 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9428 - AppSense EM Agent - Process started action success | AppSense.EM.8.Agent.Event.9428 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9429 - AppSense EM Agent - Process started action fail | AppSense.EM.8.Agent.Event.9429 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9430 - AppSense EM Agent - Process stopped action success | AppSense.EM.8.Agent.Event.9430 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9431 - AppSense EM Agent - Process stopped action fail | AppSense.EM.8.Agent.Event.9431 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9432 - AppSense EM Agent - Network connected action success | AppSense.EM.8.Agent.Event.9432 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9433 - AppSense EM Agent - Network connected action fail | AppSense.EM.8.Agent.Event.9433 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9434 - AppSense EM Agent - Network disconnected action success | AppSense.EM.8.Agent.Event.9434 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9435 - AppSense EM Agent - Network disconnected action fail | AppSense.EM.8.Agent.Event.9435 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9495 - AppSense EM Agent - Not configured | AppSense.EM.8.Agent.Event.9495 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9496 - AppSense EM Agent - Configuration unsupported | AppSense.EM.8.Agent.Event.9496 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9501 - AppSense EM Agent - Removable storage device has been disabled | AppSense.EM.8.Agent.Event.9501 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9502 - AppSense EM Agent - Removable storage device has read-only access | AppSense.EM.8.Agent.Event.9502 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9650 - AppSense EM Agent - Managed application start | AppSense.EM.8.Agent.Event.9650 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9651 - AppSense EM Agent - Managed application stop | AppSense.EM.8.Agent.Event.9651 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9652 - AppSense EM Agent - Personalization load error | AppSense.EM.8.Agent.Event.9652 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9653 - AppSense EM Agent - Personalization save error | AppSense.EM.8.Agent.Event.9653 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9654 - AppSense EM Agent - Blacklisted process started | AppSense.EM.8.Agent.Event.9654 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9655 - AppSense EM Agent - Personalization not saved | AppSense.EM.8.Agent.Event.9655 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9656 - AppSense EM Agent - Offline resiliency save started | AppSense.EM.8.Agent.Event.9656 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9657 - AppSense EM Agent - Offline resiliency save complete | AppSense.EM.8.Agent.Event.9657 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9658 - AppSense EM Agent - Personalization settings purged | AppSense.EM.8.Agent.Event.9658 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9659 - AppSense EM Agent - Personalization settings updated | AppSense.EM.8.Agent.Event.9659 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9660 - AppSense EM Agent - Personalization failed | AppSense.EM.8.Agent.Event.9660 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9661 - AppSense EM Agent - Timeout Communicating with Personalization Server | AppSense.EM.8.Agent.Event.9661 | AppSense.EM.8.Agent | EventCollection | True | False |
| Event ID 9662 - AppSense EM Agent - Trigger Action Times | AppSense.EM.8.Agent.Event.9662 | AppSense.EM.8.Agent | EventCollection | True | False |
| Alert ID 9652 - AppSense EM Agent - Personalization load error Alert | AppSense.EM.8.Agent.Event.Alrt.9652 | AppSense.EM.8.Agent | Alert | True | True |
| Alert ID 9653 - AppSense EM Agent - Personalization save error Alert | AppSense.EM.8.Agent.Event.Alrt.9653 | AppSense.EM.8.Agent | Alert | True | True |
| Alert ID 9661 - AppSense EM Agent - Timeout Communicating with Personalization Server Alert | AppSense.EM.8.Agent.Event.Alrt.9661 | AppSense.EM.8.Agent | Alert | True | True |