All Rules in AppSense.EM.8 Management Pack

 DisplayNameDescriptionIDTargetCategoryEnabledInstance NameCounter NameFrequencyEvent_IDEvent SourceAlert GenerateAlert SeverityAlert PriorityRemotableEvent Log
AppSense.EM.8.Agent.Event.9300Event ID 9300 - AppSense EM Agent - Self healing process startedA process being monitored for self healing stopped and has now been restarted.AppSense.EM.8.Agent.Event.9300AppSense.EM.8.AgentEventCollectionTrue09300FalseTrueApplication
AppSense.EM.8.Agent.Event.9301Event ID 9301 - AppSense EM Agent - Self healing registry key replacedA registry key being monitored for self healing was changed and has now been reset.AppSense.EM.8.Agent.Event.9301AppSense.EM.8.AgentEventCollectionTrue09301FalseTrueApplication
AppSense.EM.8.Agent.Event.9302Event ID 9302 - AppSense EM Agent - Self healing registry key removedA registry key being monitored for self healing was inserted and has now been removed.AppSense.EM.8.Agent.Event.9302AppSense.EM.8.AgentEventCollectionTrue09302FalseTrueApplication
AppSense.EM.8.Agent.Event.9303Event ID 9303 - AppSense EM Agent - Self healing file replacedA file being monitored for self healing was modified or removed and has now been replaced.AppSense.EM.8.Agent.Event.9303AppSense.EM.8.AgentEventCollectionTrue09303FalseTrueApplication
AppSense.EM.8.Agent.Event.9304Event ID 9304 - AppSense EM Agent - Self healing file removedA file being monitored for self healing was added and has now been removed.AppSense.EM.8.Agent.Event.9304AppSense.EM.8.AgentEventCollectionTrue09304FalseTrueApplication
AppSense.EM.8.Agent.Event.9305Event ID 9305 - AppSense EM Agent - Self healing service stoppedA service being monitored for self healing started and has now been stopped.AppSense.EM.8.Agent.Event.9305AppSense.EM.8.AgentEventCollectionTrue09305FalseTrueApplication
AppSense.EM.8.Agent.Event.9306Event ID 9306 - AppSense EM Agent - Self healing service startedA service being monitored for self healing stopped and has now been restarted.AppSense.EM.8.Agent.Event.9306AppSense.EM.8.AgentEventCollectionTrue09306FalseTrueApplication
AppSense.EM.8.Agent.Event.9307Event ID 9307 - AppSense EM Agent - Self healing registry value replacedA registry value being monitored for self healing was changed and has now been reset.AppSense.EM.8.Agent.Event.9307AppSense.EM.8.AgentEventCollectionTrue09307FalseTrueApplication
AppSense.EM.8.Agent.Event.9308Event ID 9308 - AppSense EM Agent - Self healing registry value removedA registry value being monitored for self healing was inserted and has now been removed.AppSense.EM.8.Agent.Event.9308AppSense.EM.8.AgentEventCollectionTrue09308FalseTrueApplication
AppSense.EM.8.Agent.Event.9399Event ID 9399 - AppSense EM Agent - Software is not licensedThe Environment Manager software has not been licensed.AppSense.EM.8.Agent.Event.9399AppSense.EM.8.AgentEventCollectionTrue09399FalseTrueApplication
AppSense.EM.8.Agent.Event.9400Event ID 9400 - AppSense EM Agent - Lockdown edit control blocked driveAn edit control has had a blocked drive entered into it.AppSense.EM.8.Agent.Event.9400AppSense.EM.8.AgentEventCollectionTrue09400FalseTrueApplication
AppSense.EM.8.Agent.Event.9401Event ID 9401 - AppSense EM Agent - Lockdown edit control blocked textAn edit control has had blocked text entered into it.AppSense.EM.8.Agent.Event.9401AppSense.EM.8.AgentEventCollectionTrue09401FalseTrueApplication
AppSense.EM.8.Agent.Event.9402Event ID 9402 - AppSense EM Agent - Lockdown accelerator keys blockedAn application has had accelerator keys blocked.AppSense.EM.8.Agent.Event.9402AppSense.EM.8.AgentEventCollectionTrue09402FalseTrueApplication
AppSense.EM.8.Agent.Event.9403Event ID 9403 - AppSense EM Agent - Lockdown dialog blockedAn application has had a dialog box blocked.AppSense.EM.8.Agent.Event.9403AppSense.EM.8.AgentEventCollectionTrue09403FalseTrueApplication
AppSense.EM.8.Agent.Event.9404Event ID 9404 - AppSense EM Agent - Lockdown MSAA access blockedAn application has had access blocked for a control using MSAA detection.AppSense.EM.8.Agent.Event.9404AppSense.EM.8.AgentEventCollectionTrue09404FalseTrueApplication
AppSense.EM.8.Agent.Event.9405Event ID 9405 - AppSense EM Agent - User logon (legacy) action successA user logon (legacy) action completed successfully.AppSense.EM.8.Agent.Event.9405AppSense.EM.8.AgentEventCollectionTrue09405FalseTrueApplication
AppSense.EM.8.Agent.Event.9406Event ID 9406 - AppSense EM Agent - User logon (legacy) action failA user logon (legacy) action failed to complete successfully.AppSense.EM.8.Agent.Event.9406AppSense.EM.8.AgentEventCollectionTrue09406FalseTrueApplication
AppSense.EM.8.Agent.Event.9407Event ID 9407 - AppSense EM Agent - User logoff action successA user logoff action completed successfully.AppSense.EM.8.Agent.Event.9407AppSense.EM.8.AgentEventCollectionTrue09407FalseTrueApplication
AppSense.EM.8.Agent.Event.9408Event ID 9408 - AppSense EM Agent - User logoff action failA user logoff action failed to complete successfully.AppSense.EM.8.Agent.Event.9408AppSense.EM.8.AgentEventCollectionTrue09408FalseTrueApplication
AppSense.EM.8.Agent.Event.9409Event ID 9409 - AppSense EM Agent - Computer startup action successA computer startup action completed successfully.AppSense.EM.8.Agent.Event.9409AppSense.EM.8.AgentEventCollectionTrue09409FalseTrueApplication
AppSense.EM.8.Agent.Event.9410Event ID 9410 - AppSense EM Agent - Computer startup action failA computer startup action failed to complete successfully.AppSense.EM.8.Agent.Event.9410AppSense.EM.8.AgentEventCollectionTrue09410FalseTrueApplication
AppSense.EM.8.Agent.Event.9413Event ID 9413 - AppSense EM Agent - Computer network available action successA computer network available action completed successfully.AppSense.EM.8.Agent.Event.9413AppSense.EM.8.AgentEventCollectionTrue09413FalseTrueApplication
AppSense.EM.8.Agent.Event.9414Event ID 9414 - AppSense EM Agent - Computer network available action failA computer network available action failed to complete successfully.AppSense.EM.8.Agent.Event.9414AppSense.EM.8.AgentEventCollectionTrue09414FalseTrueApplication
AppSense.EM.8.Agent.Event.9420Event ID 9420 - AppSense EM Agent - User session reconnect action successA user session reconnect action completed successfully.AppSense.EM.8.Agent.Event.9420AppSense.EM.8.AgentEventCollectionTrue09420FalseTrueApplication
AppSense.EM.8.Agent.Event.9421Event ID 9421 - AppSense EM Agent - User session reconnect action failA user session reconnect action failed to complete successfully.AppSense.EM.8.Agent.Event.9421AppSense.EM.8.AgentEventCollectionTrue09421FalseTrueApplication
AppSense.EM.8.Agent.Event.9422Event ID 9422 - AppSense EM Agent - User session disconnect action successA user session disconnect action completed successfully.AppSense.EM.8.Agent.Event.9422AppSense.EM.8.AgentEventCollectionTrue09422FalseTrueApplication
AppSense.EM.8.Agent.Event.9423Event ID 9423 - AppSense EM Agent - User session disconnect action failA user session disconnect action failed to complete successfully.AppSense.EM.8.Agent.Event.9423AppSense.EM.8.AgentEventCollectionTrue09423FalseTrueApplication
AppSense.EM.8.Agent.Event.9424Event ID 9424 - AppSense EM Agent - User session locked action successA user session locked action completed successfully.AppSense.EM.8.Agent.Event.9424AppSense.EM.8.AgentEventCollectionTrue09424FalseTrueApplication
AppSense.EM.8.Agent.Event.9425Event ID 9425 - AppSense EM Agent - User session locked action failA user session locked action failed to complete successfully.AppSense.EM.8.Agent.Event.9425AppSense.EM.8.AgentEventCollectionTrue09425FalseTrueApplication
AppSense.EM.8.Agent.Event.9426Event ID 9426 - AppSense EM Agent - User session unlocked action successA user session unlocked action completed successfully.AppSense.EM.8.Agent.Event.9426AppSense.EM.8.AgentEventCollectionTrue09426FalseTrueApplication
AppSense.EM.8.Agent.Event.9427Event ID 9427 - AppSense EM Agent - User session unlocked action failA user session unlocked action failed to complete successfully.AppSense.EM.8.Agent.Event.9427AppSense.EM.8.AgentEventCollectionTrue09427FalseTrueApplication
AppSense.EM.8.Agent.Event.9428Event ID 9428 - AppSense EM Agent - Process started action successA process started action completed successfully.AppSense.EM.8.Agent.Event.9428AppSense.EM.8.AgentEventCollectionTrue09428FalseTrueApplication
AppSense.EM.8.Agent.Event.9429Event ID 9429 - AppSense EM Agent - Process started action failA process started action failed to complete successfully.AppSense.EM.8.Agent.Event.9429AppSense.EM.8.AgentEventCollectionTrue09429FalseTrueApplication
AppSense.EM.8.Agent.Event.9430Event ID 9430 - AppSense EM Agent - Process stopped action successA process stopped action completed successfully.AppSense.EM.8.Agent.Event.9430AppSense.EM.8.AgentEventCollectionTrue09430FalseTrueApplication
AppSense.EM.8.Agent.Event.9431Event ID 9431 - AppSense EM Agent - Process stopped action failA process stopped action failed to complete successfully.AppSense.EM.8.Agent.Event.9431AppSense.EM.8.AgentEventCollectionTrue09431FalseTrueApplication
AppSense.EM.8.Agent.Event.9432Event ID 9432 - AppSense EM Agent - Network connected action successA network connected action completed successfully.AppSense.EM.8.Agent.Event.9432AppSense.EM.8.AgentEventCollectionTrue09432FalseTrueApplication
AppSense.EM.8.Agent.Event.9433Event ID 9433 - AppSense EM Agent - Network connected action failA network connected action failed to complete successfully.AppSense.EM.8.Agent.Event.9433AppSense.EM.8.AgentEventCollectionTrue09433FalseTrueApplication
AppSense.EM.8.Agent.Event.9434Event ID 9434 - AppSense EM Agent - Network disconnected action successA network disconnected action completed successfully.AppSense.EM.8.Agent.Event.9434AppSense.EM.8.AgentEventCollectionTrue09434FalseTrueApplication
AppSense.EM.8.Agent.Event.9435Event ID 9435 - AppSense EM Agent - Network disconnected action failA network disconnected action failed to complete successfully.AppSense.EM.8.Agent.Event.9435AppSense.EM.8.AgentEventCollectionTrue09435FalseTrueApplication
AppSense.EM.8.Agent.Event.9436Event ID 9436 - AppSense EM Agent - User logon (pre-session) action successA user logon (pre-session) action completed successfully.AppSense.EM.8.Agent.Event.9436AppSense.EM.8.AgentEventCollectionTrue09436FalseTrueApplication
AppSense.EM.8.Agent.Event.9437Event ID 9437 - AppSense EM Agent - User logon (pre-session) action failA user logon (pre-session) action failed to complete successfully.AppSense.EM.8.Agent.Event.9437AppSense.EM.8.AgentEventCollectionTrue09437FalseTrueApplication
AppSense.EM.8.Agent.Event.9438Event ID 9438 - AppSense EM Agent - User logon (pre-desktop) action successA user logon (pre-desktop) action completed successfully.AppSense.EM.8.Agent.Event.9438AppSense.EM.8.AgentEventCollectionTrue09438FalseTrueApplication
AppSense.EM.8.Agent.Event.9439Event ID 9439 - AppSense EM Agent - User logon (pre-desktop) action failA user logon (pre-desktop) action failed to complete successfully.AppSense.EM.8.Agent.Event.9439AppSense.EM.8.AgentEventCollectionTrue09439FalseTrueApplication
AppSense.EM.8.Agent.Event.9440Event ID 9440 - AppSense EM Agent - User logon (desktop created) action successA user logon (desktop created) action completed successfully.AppSense.EM.8.Agent.Event.9440AppSense.EM.8.AgentEventCollectionTrue09440FalseTrueApplication
AppSense.EM.8.Agent.Event.9441Event ID 9441 - AppSense EM Agent - User logon (desktop created) action failA user logon (desktop created) action failed to complete successfully.AppSense.EM.8.Agent.Event.9441AppSense.EM.8.AgentEventCollectionTrue09441FalseTrueApplication
AppSense.EM.8.Agent.Event.9480Event ID 9480 - AppSense EM Agent - Configuration merge updateThe configuration merge folder has been updated.AppSense.EM.8.Agent.Event.9480AppSense.EM.8.AgentEventCollectionTrue09480FalseTrueApplication
AppSense.EM.8.Agent.Event.9481Event ID 9481 - AppSense EM Agent - Configuration merge startThe configuration merge has started.AppSense.EM.8.Agent.Event.9481AppSense.EM.8.AgentEventCollectionTrue09481FalseTrueApplication
AppSense.EM.8.Agent.Event.9482Event ID 9482 - AppSense EM Agent - Configuration merge completeThe configuration merge has completed successfully.AppSense.EM.8.Agent.Event.9482AppSense.EM.8.AgentEventCollectionTrue09482FalseTrueApplication
AppSense.EM.8.Agent.Event.9483Event ID 9483 - AppSense EM Agent - Configuration merge failThe configuration merge has failed.AppSense.EM.8.Agent.Event.9483AppSense.EM.8.AgentEventCollectionTrue09483FalseTrueApplication
AppSense.EM.8.Agent.Event.9484Event ID 9484 - AppSense EM Agent - Configuration merge timeoutThe configuration merge has timed out waiting for expected filesAppSense.EM.8.Agent.Event.9484AppSense.EM.8.AgentEventCollectionTrue09484FalseTrueApplication
AppSense.EM.8.Agent.Event.9495Event ID 9495 - AppSense EM Agent - Not configuredAppSense Environment Manager has not been configured.AppSense.EM.8.Agent.Event.9495AppSense.EM.8.AgentEventCollectionTrue09495FalseTrueApplication
AppSense.EM.8.Agent.Event.9496Event ID 9496 - AppSense EM Agent - Configuration unsupportedAn old configuration has been found.AppSense.EM.8.Agent.Event.9496AppSense.EM.8.AgentEventCollectionTrue09496FalseTrueApplication
AppSense.EM.8.Agent.Event.9650Event ID 9650 - AppSense EM Agent - Managed application startA managed application has started.AppSense.EM.8.Agent.Event.9650AppSense.EM.8.AgentEventCollectionTrue09650FalseTrueApplication
AppSense.EM.8.Agent.Event.9651Event ID 9651 - AppSense EM Agent - Managed application stopA managed application has stopped.AppSense.EM.8.Agent.Event.9651AppSense.EM.8.AgentEventCollectionTrue09651FalseTrueApplication
AppSense.EM.8.Agent.Event.9652Event ID 9652 - AppSense EM Agent - Personalization load errorPersonalization settings for a managed application failed to load.AppSense.EM.8.Agent.Event.9652AppSense.EM.8.AgentEventCollectionTrue09652FalseTrueApplication
AppSense.EM.8.Agent.Event.9653Event ID 9653 - AppSense EM Agent - Personalization save errorPersonalization settings for a managed application failed to save.AppSense.EM.8.Agent.Event.9653AppSense.EM.8.AgentEventCollectionTrue09653FalseTrueApplication
AppSense.EM.8.Agent.Event.9654Event ID 9654 - AppSense EM Agent - Blacklisted process startedA managed process has launched a blacklisted process.AppSense.EM.8.Agent.Event.9654AppSense.EM.8.AgentEventCollectionTrue09654FalseTrueApplication
AppSense.EM.8.Agent.Event.9655Event ID 9655 - AppSense EM Agent - Personalization not savedPersonalization settings not saved as another group application is running.AppSense.EM.8.Agent.Event.9655AppSense.EM.8.AgentEventCollectionTrue09655FalseTrueApplication
AppSense.EM.8.Agent.Event.9656Event ID 9656 - AppSense EM Agent - Offline resiliency save startedOffline resiliency save has been started for a managed application.AppSense.EM.8.Agent.Event.9656AppSense.EM.8.AgentEventCollectionTrue09656FalseTrueApplication
AppSense.EM.8.Agent.Event.9657Event ID 9657 - AppSense EM Agent - Offline resiliency save completeOffline resiliency has successfully saved a managed application’s personalization settings.AppSense.EM.8.Agent.Event.9657AppSense.EM.8.AgentEventCollectionTrue09657FalseTrueApplication
AppSense.EM.8.Agent.Event.9658Event ID 9658 - AppSense EM Agent - Personalization settings purgedPersonalization settings purged as local cache disabled.AppSense.EM.8.Agent.Event.9658AppSense.EM.8.AgentEventCollectionTrue09658FalseTrueApplication
AppSense.EM.8.Agent.Event.9659Event ID 9659 - AppSense EM Agent - Personalization settings updatedUser personalization settings updated from personalization server.AppSense.EM.8.Agent.Event.9659AppSense.EM.8.AgentEventCollectionTrue09659FalseTrueApplication
AppSense.EM.8.Agent.Event.9660Event ID 9660 - AppSense EM Agent - Personalization failedPersonalization for a managed application failed.AppSense.EM.8.Agent.Event.9660AppSense.EM.8.AgentEventCollectionTrue09660FalseTrueApplication
AppSense.EM.8.Agent.Event.9661Event ID 9661 - AppSense EM Agent - Timeout Communicating with Personalization ServerA timeout occurred whilst trying to communicate with the Personalization Server.AppSense.EM.8.Agent.Event.9661AppSense.EM.8.AgentEventCollectionTrue09661FalseTrueApplication
AppSense.EM.8.Agent.Event.9662Event ID 9662 - AppSense EM Agent - Trigger Action TimesAll the actions have run for the trigger.AppSense.EM.8.Agent.Event.9662AppSense.EM.8.AgentEventCollectionTrue09662FalseTrueApplication
AppSense.EM.8.Agent.Event.9663Event ID 9663 - AppSense EM Agent - PreCache Application SuccessSuccesfully PreCached Managed ApplicationAppSense.EM.8.Agent.Event.9663AppSense.EM.8.AgentEventCollectionTrue09663FalseTrueApplication
AppSense.EM.8.Agent.Event.9664Event ID 9664 - AppSense EM Agent - PreCache Group SuccessSuccessfully PreCached Managed Application GroupAppSense.EM.8.Agent.Event.9664AppSense.EM.8.AgentEventCollectionTrue09664FalseTrueApplication
AppSense.EM.8.Agent.Event.9665Event ID 9665 - AppSense EM Agent - PreCache Managed Application FailureFailed to PreCache Managed ApplicationAppSense.EM.8.Agent.Event.9665AppSense.EM.8.AgentEventCollectionTrue09665FalseTrueApplication
AppSense.EM.8.Agent.Event.9666Event ID 9666 - AppSense EM Agent - PreCache Group FailureFailed to PreCache Managed Application GroupAppSense.EM.8.Agent.Event.9666AppSense.EM.8.AgentEventCollectionTrue09666FalseTrueApplication
AppSense.EM.8.Agent.Event.9667Event ID 9667 - AppSense EM Agent - Personalization Profile ImportA Profile Import is Active.AppSense.EM.8.Agent.Event.9667AppSense.EM.8.AgentEventCollectionTrue09667FalseTrueApplication
AppSense.EM.8.Agent.Event.9668Event ID 9668 - AppSense EM Agent - Personalization Profile ExportA Profile Export is Active.AppSense.EM.8.Agent.Event.9668AppSense.EM.8.AgentEventCollectionTrue09668FalseTrueApplication
AppSense.EM.8.Agent.Event.9670Event ID 9670 - AppSense EM Agent - FolderRedirect EmCopy SuccessFolder redirect EM copy action completed successfullyAppSense.EM.8.Agent.Event.9670AppSense.EM.8.AgentEventCollectionTrue09670FalseTrueApplication
AppSense.EM.8.Agent.Event.9671Event ID 9671 - AppSense EM Agent - FolderRedirect EmCopy FailFolder redirect EM copy action failedAppSense.EM.8.Agent.Event.9671AppSense.EM.8.AgentEventCollectionTrue09671FalseTrueApplication
AppSense.EM.8.Agent.Event.9680Event ID 9680 - AppSense EM Agent - Endpoint Self Service start failureThe Endpoint Self Service process failed to startAppSense.EM.8.Agent.Event.9680AppSense.EM.8.AgentEventCollectionTrue09680FalseTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9483Alert ID 9483 - AppSense EM Agent - Configuration merge fail AlertThe configuration merge has failed.AppSense.EM.8.Agent.Event.Alrt.9483AppSense.EM.8.AgentAlertTrue09483TrueErrorHighTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9484Alert ID 9484 - AppSense EM Agent - Configuration merge timeout AlertThe configuration merge has timed out waiting for expected filesAppSense.EM.8.Agent.Event.Alrt.9484AppSense.EM.8.AgentAlertTrue09484TrueWarningNormalTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9652Alert ID 9652 - AppSense EM Agent - Personalization load error AlertPersonalization settings for a managed application failed to load.AppSense.EM.8.Agent.Event.Alrt.9652AppSense.EM.8.AgentAlertTrue09652TrueErrorHighTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9653Alert ID 9653 - AppSense EM Agent - Personalization save error AlertPersonalization settings for a managed application failed to save.AppSense.EM.8.Agent.Event.Alrt.9653AppSense.EM.8.AgentAlertTrue09653TrueErrorHighTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9661Alert ID 9661 - AppSense EM Agent - Timeout Communicating with Personalization Server AlertA timeout occurred whilst trying to communicate with the Personalization Server.AppSense.EM.8.Agent.Event.Alrt.9661AppSense.EM.8.AgentAlertTrue09661TrueWarningNormalTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9665Alert ID 9665 - AppSense EM Agent - PreCache Managed Application Failure AlertFailed to PreCache Managed ApplicationAppSense.EM.8.Agent.Event.Alrt.9665AppSense.EM.8.AgentAlertTrue09665TrueErrorHighTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9666Alert ID 9666 - AppSense EM Agent - PreCache Group Failure AlertFailed to PreCache Managed Application GroupAppSense.EM.8.Agent.Event.Alrt.9666AppSense.EM.8.AgentAlertTrue09666TrueErrorHighTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9680Alert ID 9680 - AppSense EM Agent - Endpoint Self Service start failure AlertThe Endpoint Self Service process failed to startAppSense.EM.8.Agent.Event.Alrt.9680AppSense.EM.8.AgentAlertTrue09680TrueErrorHighTrueApplication