| | DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
|---|
 | Event ID 9000 - AppSense AM Agent - Denied execution | Prohibited execution request. | AppSense.AM.8.Agent.Event.9000 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9000 | | False | | | True | Application |
| Event ID 9001 - AppSense AM Agent - Allowed execution | Allowed execution request. | AppSense.AM.8.Agent.Event.9001 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9001 | | False | | | True | Application |
| Event ID 9002 - AppSense AM Agent - Overwrite changed owner | Overwrite of an allowed executable. | AppSense.AM.8.Agent.Event.9002 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9002 | | False | | | True | Application |
| Event ID 9003 - AppSense AM Agent - Rename changed owner | Rename of a prohibited executable. | AppSense.AM.8.Agent.Event.9003 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9003 | | False | | | True | Application |
| Event ID 9004 - AppSense AM Agent - Application limit denial | Application limit denial. | AppSense.AM.8.Agent.Event.9004 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9004 | | False | | | True | Application |
| Event ID 9005 - AppSense AM Agent - Time limit denial | Time limit denial. | AppSense.AM.8.Agent.Event.9005 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9005 | | False | | | True | Application |
| Event ID 9006 - AppSense AM Agent - Self-authorization | Self-authorization decision by user. | AppSense.AM.8.Agent.Event.9006 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9006 | | False | | | True | Application |
| Event ID 9007 - AppSense AM Agent - Self-authorized allow | Self-authorized execution request. | AppSense.AM.8.Agent.Event.9007 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9007 | | False | | | True | Application |
| Event ID 9009 - AppSense AM Agent - Scripted rule timeout | Script execution timed out. | AppSense.AM.8.Agent.Event.9009 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9009 | | False | | | True | Application |
| Event ID 9010 - AppSense AM Agent - Scripted rule fail | Script failed to complete. | AppSense.AM.8.Agent.Event.9010 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9010 | | False | | | True | Application |
| Event ID 9011 - AppSense AM Agent - Scripted rule success | Script completed successfully. | AppSense.AM.8.Agent.Event.9011 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9011 | | False | | | True | Application |
| Event ID 9012 - AppSense AM Agent - Trusted Vendor denial | Digital Certificate failed Trusted Vendor check. | AppSense.AM.8.Agent.Event.9012 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9012 | | False | | | True | Application |
| Event ID 9013 - AppSense AM Agent - Network Item denied | Prohibited Network Item request. | AppSense.AM.8.Agent.Event.9013 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9013 | | False | | | True | Application |
| Event ID 9014 - AppSense AM Agent - Network Item allowed | Allowed Network Item request. | AppSense.AM.8.Agent.Event.9014 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9014 | | False | | | True | Application |
| Event ID 9015 - AppSense AM Agent - Application started | An allowed application started running. | AppSense.AM.8.Agent.Event.9015 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9015 | | False | | | True | Application |
| Event ID 9016 - AppSense AM Agent - Unable to change ownership | The file's ownership could not be changed. | AppSense.AM.8.Agent.Event.9016 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9016 | | False | | | True | Application |
| Event ID 9017 - AppSense AM Agent - Application Termination | An Application has been terminated by Application Manager. | AppSense.AM.8.Agent.Event.9017 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9017 | | False | | | True | Application |
| Event ID 9018 - AppSense AM Agent - Application User Rights changed | The application's user rights have been changed. | AppSense.AM.8.Agent.Event.9018 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9018 | | False | | | True | Application |
| Event ID 9019 - AppSense AM Agent - Web Installation allowed | Allowed Web Installation request. | AppSense.AM.8.Agent.Event.9019 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9019 | | False | | | True | Application |
| Event ID 9020 - AppSense AM Agent - Web Installation restricted | Restricted Web Installation request. | AppSense.AM.8.Agent.Event.9020 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9020 | | False | | | True | Application |
| Event ID 9021 - AppSense AM Agent - Web Installation restricted | Windows Restricted Web Installation request. | AppSense.AM.8.Agent.Event.9021 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9021 | | False | | | True | Application |
| Event ID 9022 - AppSense AM Agent - Web Installation fail | Web Installation failed to complete. | AppSense.AM.8.Agent.Event.9022 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9022 | | False | | | True | Application |
| Event ID 9023 - AppSense AM Agent - Self-Elevation allowed | Self-Elevation request. | AppSense.AM.8.Agent.Event.9023 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9023 | | False | | | True | Application |
| Event ID 9051 - AppSense AM Agent - Policy Change granted | A Policy Change Request has been granted. | AppSense.AM.8.Agent.Event.9051 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9051 | | False | | | True | Application |
| Event ID 9052 - AppSense AM Agent - Policy Change invalid response code | The maximum allowed response code attempts has been exceeded. | AppSense.AM.8.Agent.Event.9052 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9052 | | False | | | True | Application |
| Event ID 9053 - AppSense AM Agent - User-requested allow | An allowed Policy Change application has started. | AppSense.AM.8.Agent.Event.9053 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9053 | | False | | | True | Application |
| Event ID 9054 - AppSense AM Agent - User-requested elevate | An elevated Policy Change application has started. | AppSense.AM.8.Agent.Event.9054 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9054 | | False | | | True | Application |
| Event ID 9095 - AppSense AM Agent - Not configured | AppSense Application Manager has not been configured. | AppSense.AM.8.Agent.Event.9095 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9095 | | False | | | True | Application |
| Event ID 9096 - AppSense AM Agent - Configuration merge success | The configuration merge has completed successfully. | AppSense.AM.8.Agent.Event.9096 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9096 | | False | | | True | Application |
| Event ID 9097 - AppSense AM Agent - Configuration merge fail | The configuration merge has failed. | AppSense.AM.8.Agent.Event.9097 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9097 | | False | | | True | Application |
| Event ID 9098 - AppSense AM Agent - Configuration merge timeout | The configuration merge is still waiting for expected files. | AppSense.AM.8.Agent.Event.9098 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9098 | | False | | | True | Application |
| Event ID 9099 - AppSense AM Agent - Agent not licensed | AppSense Application Manager is not licensed. | AppSense.AM.8.Agent.Event.9099 | AppSense.AM.8.Agent | EventCollection | True | | | 0 | 9099 | | False | | | True | Application |
| Alert ID 9000 - AppSense AM Agent - Denied execution Alert | Prohibited execution request. | AppSense.AM.8.Agent.Event.Alrt.9000 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9000 | | True | Warning | Normal | True | Application |
| Alert ID 9002 - AppSense AM Agent - Overwrite changed owner Alert | Overwrite of an allowed executable. | AppSense.AM.8.Agent.Event.Alrt.9002 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9002 | | True | Warning | Normal | True | Application |
| Alert ID 9003 - AppSense AM Agent - Rename changed owner Alert | Rename of a prohibited executable. | AppSense.AM.8.Agent.Event.Alrt.9003 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9003 | | True | Warning | Normal | True | Application |
| Alert ID 9004 - AppSense AM Agent - Application limit denial Alert | Application limit denial. | AppSense.AM.8.Agent.Event.Alrt.9004 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9004 | | True | Warning | Normal | True | Application |
| Alert ID 9005 - AppSense AM Agent - Time limit denial Alert | Time limit denial. | AppSense.AM.8.Agent.Event.Alrt.9005 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9005 | | True | Warning | Normal | True | Application |
| Alert ID 9006 - AppSense AM Agent - Self-authorization Alert | Self-authorization decision by user. | AppSense.AM.8.Agent.Event.Alrt.9006 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9006 | | True | Warning | Normal | True | Application |
| Alert ID 9007 - AppSense AM Agent - Self-authorized allow Alert | Self-authorized execution request. | AppSense.AM.8.Agent.Event.Alrt.9007 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9007 | | True | Warning | Normal | True | Application |
| Alert ID 9009 - AppSense AM Agent - Scripted rule timeout Alert | Script execution timed out. | AppSense.AM.8.Agent.Event.Alrt.9009 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9009 | | True | Warning | Normal | True | Application |
| Alert ID 9010 - AppSense AM Agent - Scripted rule fail Alert | Script failed to complete. | AppSense.AM.8.Agent.Event.Alrt.9010 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9010 | | True | Warning | Normal | True | Application |
| Alert ID 9012 - AppSense AM Agent - Trusted Vendor denial Alert | Digital Certificate failed Trusted Vendor check. | AppSense.AM.8.Agent.Event.Alrt.9012 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9012 | | True | Warning | Normal | True | Application |
| Alert ID 9013 - AppSense AM Agent - Network Item denied Alert | Prohibited Network Item request. | AppSense.AM.8.Agent.Event.Alrt.9013 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9013 | | True | Warning | Normal | True | Application |
| Alert ID 9016 - AppSense AM Agent - Unable to change ownership Alert | The file's ownership could not be changed. | AppSense.AM.8.Agent.Event.Alrt.9016 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9016 | | True | Error | High | True | Application |
| Alert ID 9017 - AppSense AM Agent - Application Termination Alert | An Application has been terminated by Application Manager. | AppSense.AM.8.Agent.Event.Alrt.9017 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9017 | | True | Warning | Normal | True | Application |
| Alert ID 9018 - AppSense AM Agent - Application User Rights changed Alert | The application's user rights have been changed. | AppSense.AM.8.Agent.Event.Alrt.9018 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9018 | | True | Warning | Normal | True | Application |
| Alert ID 9022 - AppSense AM Agent - Web Installation fail Alert | Web Installation failed to complete. | AppSense.AM.8.Agent.Event.Alrt.9022 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9022 | | True | Warning | Normal | True | Application |
| Alert ID 9052 - AppSense AM Agent - Policy Change invalid response code Alert | The maximum allowed response code attempts has been exceeded. | AppSense.AM.8.Agent.Event.Alrt.9052 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9052 | | True | Error | High | True | Application |
| Alert ID 9095 - AppSense AM Agent - Not configured Alert | AppSense Application Manager has not been configured. | AppSense.AM.8.Agent.Event.Alrt.9095 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9095 | | True | Warning | Normal | True | Application |
| Alert ID 9097 - AppSense AM Agent - Configuration merge fail Alert | The configuration merge has failed. | AppSense.AM.8.Agent.Event.Alrt.9097 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9097 | | True | Error | High | True | Application |
| Alert ID 9098 - AppSense AM Agent - Configuration merge timeout Alert | The configuration merge is still waiting for expected files. | AppSense.AM.8.Agent.Event.Alrt.9098 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9098 | | True | Warning | Normal | True | Application |
| Alert ID 9099 - AppSense AM Agent - Agent not licensed Alert | AppSense Application Manager is not licensed. | AppSense.AM.8.Agent.Event.Alrt.9099 | AppSense.AM.8.Agent | Alert | True | | | 0 | 9099 | | True | Error | High | True | Application |
Home