| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| Event ID 9300 - AppSense EM Agent - Self healing process started | A process being monitored for self healing stopped and has now been restarted. | AppSense.EM.8.Agent.Event.9300 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9301 - AppSense EM Agent - Self healing registry key replaced | A registry key being monitored for self healing was changed and has now been reset. | AppSense.EM.8.Agent.Event.9301 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9302 - AppSense EM Agent - Self healing registry key removed | A registry key being monitored for self healing was inserted and has now been removed. | AppSense.EM.8.Agent.Event.9302 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9303 - AppSense EM Agent - Self healing file replaced | A file being monitored for self healing was modified or removed and has now been replaced. | AppSense.EM.8.Agent.Event.9303 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9304 - AppSense EM Agent - Self healing file removed | A file being monitored for self healing was added and has now been removed. | AppSense.EM.8.Agent.Event.9304 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9305 - AppSense EM Agent - Self healing service stopped | A service being monitored for self healing started and has now been stopped. | AppSense.EM.8.Agent.Event.9305 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9306 - AppSense EM Agent - Self healing service started | A service being monitored for self healing stopped and has now been restarted. | AppSense.EM.8.Agent.Event.9306 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9307 - AppSense EM Agent - Self healing registry value replaced | A registry value being monitored for self healing was changed and has now been reset. | AppSense.EM.8.Agent.Event.9307 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9308 - AppSense EM Agent - Self healing registry value removed | A registry value being monitored for self healing was inserted and has now been removed. | AppSense.EM.8.Agent.Event.9308 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9399 - AppSense EM Agent - Software is not licensed | The Environment Manager software has not been licensed | AppSense.EM.8.Agent.Event.9399 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9400 - AppSense EM Agent - Lockdown edit control blocked drive | An edit control has had a blocked drive entered into it. | AppSense.EM.8.Agent.Event.9400 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9401 - AppSense EM Agent - Lockdown edit control blocked text | An edit control has had blocked text entered into it. | AppSense.EM.8.Agent.Event.9401 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9402 - AppSense EM Agent - Lockdown accelerator keys blocked | An application has had accelerator keys blocked. | AppSense.EM.8.Agent.Event.9402 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9403 - AppSense EM Agent - Lockdown dialog blocked | An application has had a dialog box blocked. | AppSense.EM.8.Agent.Event.9403 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9404 - AppSense EM Agent - Lockdown MSAA access blocked | An application has had access blocked for a control using MSAA detection. | AppSense.EM.8.Agent.Event.9404 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9405 - AppSense EM Agent - User logon action success | A user logon action completed successfully. | AppSense.EM.8.Agent.Event.9405 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9406 - AppSense EM Agent - User logon action fail | A user logon action failed to complete successfully. | AppSense.EM.8.Agent.Event.9406 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9407 - AppSense EM Agent - User logoff action success | A user logoff action completed successfully. | AppSense.EM.8.Agent.Event.9407 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9408 - AppSense EM Agent - User logoff action fail | A user logoff action failed to complete successfully. | AppSense.EM.8.Agent.Event.9408 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9409 - AppSense EM Agent - Computer startup action success | A computer startup action completed successfully. | AppSense.EM.8.Agent.Event.9409 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9410 - AppSense EM Agent - Computer startup action fail | A computer startup action failed to complete successfully. | AppSense.EM.8.Agent.Event.9410 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9420 - AppSense EM Agent - User session reconnect action success | A user session reconnect action completed successfully. | AppSense.EM.8.Agent.Event.9420 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9421 - AppSense EM Agent - User session reconnect action fail | A user session reconnect action failed to complete successfully. | AppSense.EM.8.Agent.Event.9421 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9422 - AppSense EM Agent - User session disconnect action success | A user session disconnect action completed successfully. | AppSense.EM.8.Agent.Event.9422 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9423 - AppSense EM Agent - User session disconnect action fail | A user session disconnect action failed to complete successfully. | AppSense.EM.8.Agent.Event.9423 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9424 - AppSense EM Agent - User session locked action success | A user session locked action completed successfully. | AppSense.EM.8.Agent.Event.9424 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9425 - AppSense EM Agent - User session locked action fail | A user session locked action failed to complete successfully. | AppSense.EM.8.Agent.Event.9425 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9426 - AppSense EM Agent - User session unlocked action success | A user session unlocked action completed successfully. | AppSense.EM.8.Agent.Event.9426 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9427 - AppSense EM Agent - User session unlocked action fail | A user session unlocked action failed to complete successfully. | AppSense.EM.8.Agent.Event.9427 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9428 - AppSense EM Agent - Process started action success | A process started action completed successfully. | AppSense.EM.8.Agent.Event.9428 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9429 - AppSense EM Agent - Process started action fail | A process started action failed to complete successfully. | AppSense.EM.8.Agent.Event.9429 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9430 - AppSense EM Agent - Process stopped action success | A process stopped action completed successfully. | AppSense.EM.8.Agent.Event.9430 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9431 - AppSense EM Agent - Process stopped action fail | A process stopped action failed to complete successfully. | AppSense.EM.8.Agent.Event.9431 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9432 - AppSense EM Agent - Network connected action success | A network connected action completed successfully. | AppSense.EM.8.Agent.Event.9432 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9433 - AppSense EM Agent - Network connected action fail | A network connected action failed to complete successfully. | AppSense.EM.8.Agent.Event.9433 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9434 - AppSense EM Agent - Network disconnected action success | A network disconnected action completed successfully. | AppSense.EM.8.Agent.Event.9434 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9435 - AppSense EM Agent - Network disconnected action fail | A network disconnected action failed to complete successfully. | AppSense.EM.8.Agent.Event.9435 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9480 - AppSense EM Agent - Configuration merge update | The configuration merge folder has been updated. | AppSense.EM.8.Agent.Event.9480 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9481 - AppSense EM Agent - Configuration merge start | The configuration merge has started. | AppSense.EM.8.Agent.Event.9481 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9482 - AppSense EM Agent - Configuration merge complete | The configuration merge has completed successfully. | AppSense.EM.8.Agent.Event.9482 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9483 - AppSense EM Agent - Configuration merge fail | The configuration merge has failed. | AppSense.EM.8.Agent.Event.9483 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9484 - AppSense EM Agent - Configuration merge timeout | The configuration merge has timed out waiting for expected files | AppSense.EM.8.Agent.Event.9484 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9495 - AppSense EM Agent - Not configured | AppSense Environment Manager has not been configured. | AppSense.EM.8.Agent.Event.9495 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9496 - AppSense EM Agent - Configuration unsupported | An old configuration has been found. | AppSense.EM.8.Agent.Event.9496 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9501 - AppSense EM Agent - Removable storage device has been disabled | The user has tried to access a device which has been disabled. | AppSense.EM.8.Agent.Event.9501 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9502 - AppSense EM Agent - Removable storage device has read-only access | The user has tried to write to a device which has read-only access. | AppSense.EM.8.Agent.Event.9502 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9650 - AppSense EM Agent - Managed application start | A managed application has started. | AppSense.EM.8.Agent.Event.9650 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9651 - AppSense EM Agent - Managed application stop | A managed application has stopped. | AppSense.EM.8.Agent.Event.9651 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9652 - AppSense EM Agent - Personalization load error | Personalization settings for a managed application failed to load. | AppSense.EM.8.Agent.Event.9652 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9653 - AppSense EM Agent - Personalization save error | Personalization settings for a managed application failed to save. | AppSense.EM.8.Agent.Event.9653 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9654 - AppSense EM Agent - Blacklisted process started | A managed process has launched a blacklisted process. | AppSense.EM.8.Agent.Event.9654 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9655 - AppSense EM Agent - Personalization not saved | Personalization settings not saved as another group application is running. | AppSense.EM.8.Agent.Event.9655 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9656 - AppSense EM Agent - Offline resiliency save started | Offline resiliency save has been started for a managed application. | AppSense.EM.8.Agent.Event.9656 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9657 - AppSense EM Agent - Offline resiliency save complete | Offline resiliency has successfully saved a managed application’s personalization settings. | AppSense.EM.8.Agent.Event.9657 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9658 - AppSense EM Agent - Personalization settings purged | Personalization settings purged as offline mode disabled. | AppSense.EM.8.Agent.Event.9658 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9659 - AppSense EM Agent - Personalization settings updated | User personalization settings updated from personalization server. | AppSense.EM.8.Agent.Event.9659 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9660 - AppSense EM Agent - Personalization failed | Personalization for a managed application failed. | AppSense.EM.8.Agent.Event.9660 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9661 - AppSense EM Agent - Timeout Communicating with Personalization Server | A timeout occurred whilst trying to communicate with the Personalization Server. | AppSense.EM.8.Agent.Event.9661 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Event ID 9662 - AppSense EM Agent - Trigger Action Times | All the actions have run for the trigger. | AppSense.EM.8.Agent.Event.9662 | AppSense.EM.8.Agent | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Alert ID 9483 - AppSense EM Agent - Configuration merge fail Alert | The configuration merge has failed. | AppSense.EM.8.Agent.Event.Alrt.9483 | AppSense.EM.8.Agent | Alert | True | | | 0 | 0 | | True | Error | High | True | Application |
| Alert ID 9484 - AppSense EM Agent - Configuration merge timeout Alert | The configuration merge has timed out waiting for expected files | AppSense.EM.8.Agent.Event.Alrt.9484 | AppSense.EM.8.Agent | Alert | True | | | 0 | 0 | | True | Warning | Normal | True | Application |
| Alert ID 9652 - AppSense EM Agent - Personalization load error Alert | Personalization settings for a managed application failed to load. | AppSense.EM.8.Agent.Event.Alrt.9652 | AppSense.EM.8.Agent | Alert | True | | | 0 | 0 | | True | Error | High | True | Application |
| Alert ID 9653 - AppSense EM Agent - Personalization save error Alert | Personalization settings for a managed application failed to save. | AppSense.EM.8.Agent.Event.Alrt.9653 | AppSense.EM.8.Agent | Alert | True | | | 0 | 0 | | True | Error | High | True | Application |
| Alert ID 9661 - AppSense EM Agent - Timeout Communicating with Personalization Server Alert | A timeout occurred whilst trying to communicate with the Personalization Server. | AppSense.EM.8.Agent.Event.Alrt.9661 | AppSense.EM.8.Agent | Alert | True | | | 0 | 0 | | True | Warning | Normal | True | Application |