All Rules in AppSense.EM.8 Management Pack

 DisplayNameDescriptionIDTargetCategoryEnabledInstance NameCounter NameFrequencyEvent_IDEvent SourceAlert GenerateAlert SeverityAlert PriorityRemotableEvent Log
AppSense.EM.8.Agent.Event.9300Event ID 9300 - AppSense EM Agent - Self healing process startedA process being monitored for self healing stopped and has now been restarted.AppSense.EM.8.Agent.Event.9300AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9301Event ID 9301 - AppSense EM Agent - Self healing registry key replacedA registry key being monitored for self healing was changed and has now been reset.AppSense.EM.8.Agent.Event.9301AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9302Event ID 9302 - AppSense EM Agent - Self healing registry key removedA registry key being monitored for self healing was inserted and has now been removed.AppSense.EM.8.Agent.Event.9302AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9303Event ID 9303 - AppSense EM Agent - Self healing file replacedA file being monitored for self healing was modified or removed and has now been replaced.AppSense.EM.8.Agent.Event.9303AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9304Event ID 9304 - AppSense EM Agent - Self healing file removedA file being monitored for self healing was added and has now been removed.AppSense.EM.8.Agent.Event.9304AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9305Event ID 9305 - AppSense EM Agent - Self healing service stoppedA service being monitored for self healing started and has now been stopped.AppSense.EM.8.Agent.Event.9305AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9306Event ID 9306 - AppSense EM Agent - Self healing service startedA service being monitored for self healing stopped and has now been restarted.AppSense.EM.8.Agent.Event.9306AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9307Event ID 9307 - AppSense EM Agent - Self healing registry value replacedA registry value being monitored for self healing was changed and has now been reset.AppSense.EM.8.Agent.Event.9307AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9308Event ID 9308 - AppSense EM Agent - Self healing registry value removedA registry value being monitored for self healing was inserted and has now been removed.AppSense.EM.8.Agent.Event.9308AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9399Event ID 9399 - AppSense EM Agent - Software is not licensedThe Environment Manager software has not been licensedAppSense.EM.8.Agent.Event.9399AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9400Event ID 9400 - AppSense EM Agent - Lockdown edit control blocked driveAn edit control has had a blocked drive entered into it.AppSense.EM.8.Agent.Event.9400AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9401Event ID 9401 - AppSense EM Agent - Lockdown edit control blocked textAn edit control has had blocked text entered into it.AppSense.EM.8.Agent.Event.9401AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9402Event ID 9402 - AppSense EM Agent - Lockdown accelerator keys blockedAn application has had accelerator keys blocked.AppSense.EM.8.Agent.Event.9402AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9403Event ID 9403 - AppSense EM Agent - Lockdown dialog blockedAn application has had a dialog box blocked.AppSense.EM.8.Agent.Event.9403AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9404Event ID 9404 - AppSense EM Agent - Lockdown MSAA access blockedAn application has had access blocked for a control using MSAA detection.AppSense.EM.8.Agent.Event.9404AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9405Event ID 9405 - AppSense EM Agent - User logon action successA user logon action completed successfully.AppSense.EM.8.Agent.Event.9405AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9406Event ID 9406 - AppSense EM Agent - User logon action failA user logon action failed to complete successfully.AppSense.EM.8.Agent.Event.9406AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9407Event ID 9407 - AppSense EM Agent - User logoff action successA user logoff action completed successfully.AppSense.EM.8.Agent.Event.9407AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9408Event ID 9408 - AppSense EM Agent - User logoff action failA user logoff action failed to complete successfully.AppSense.EM.8.Agent.Event.9408AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9409Event ID 9409 - AppSense EM Agent - Computer startup action successA computer startup action completed successfully.AppSense.EM.8.Agent.Event.9409AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9410Event ID 9410 - AppSense EM Agent - Computer startup action failA computer startup action failed to complete successfully.AppSense.EM.8.Agent.Event.9410AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9420Event ID 9420 - AppSense EM Agent - User session reconnect action successA user session reconnect action completed successfully.AppSense.EM.8.Agent.Event.9420AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9421Event ID 9421 - AppSense EM Agent - User session reconnect action failA user session reconnect action failed to complete successfully.AppSense.EM.8.Agent.Event.9421AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9422Event ID 9422 - AppSense EM Agent - User session disconnect action successA user session disconnect action completed successfully.AppSense.EM.8.Agent.Event.9422AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9423Event ID 9423 - AppSense EM Agent - User session disconnect action failA user session disconnect action failed to complete successfully.AppSense.EM.8.Agent.Event.9423AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9424Event ID 9424 - AppSense EM Agent - User session locked action successA user session locked action completed successfully.AppSense.EM.8.Agent.Event.9424AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9425Event ID 9425 - AppSense EM Agent - User session locked action failA user session locked action failed to complete successfully.AppSense.EM.8.Agent.Event.9425AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9426Event ID 9426 - AppSense EM Agent - User session unlocked action successA user session unlocked action completed successfully.AppSense.EM.8.Agent.Event.9426AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9427Event ID 9427 - AppSense EM Agent - User session unlocked action failA user session unlocked action failed to complete successfully.AppSense.EM.8.Agent.Event.9427AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9428Event ID 9428 - AppSense EM Agent - Process started action successA process started action completed successfully.AppSense.EM.8.Agent.Event.9428AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9429Event ID 9429 - AppSense EM Agent - Process started action failA process started action failed to complete successfully.AppSense.EM.8.Agent.Event.9429AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9430Event ID 9430 - AppSense EM Agent - Process stopped action successA process stopped action completed successfully.AppSense.EM.8.Agent.Event.9430AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9431Event ID 9431 - AppSense EM Agent - Process stopped action failA process stopped action failed to complete successfully.AppSense.EM.8.Agent.Event.9431AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9432Event ID 9432 - AppSense EM Agent - Network connected action successA network connected action completed successfully.AppSense.EM.8.Agent.Event.9432AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9433Event ID 9433 - AppSense EM Agent - Network connected action failA network connected action failed to complete successfully.AppSense.EM.8.Agent.Event.9433AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9434Event ID 9434 - AppSense EM Agent - Network disconnected action successA network disconnected action completed successfully.AppSense.EM.8.Agent.Event.9434AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9435Event ID 9435 - AppSense EM Agent - Network disconnected action failA network disconnected action failed to complete successfully.AppSense.EM.8.Agent.Event.9435AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9480Event ID 9480 - AppSense EM Agent - Configuration merge updateThe configuration merge folder has been updated.AppSense.EM.8.Agent.Event.9480AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9481Event ID 9481 - AppSense EM Agent - Configuration merge startThe configuration merge has started.AppSense.EM.8.Agent.Event.9481AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9482Event ID 9482 - AppSense EM Agent - Configuration merge completeThe configuration merge has completed successfully.AppSense.EM.8.Agent.Event.9482AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9483Event ID 9483 - AppSense EM Agent - Configuration merge failThe configuration merge has failed.AppSense.EM.8.Agent.Event.9483AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9484Event ID 9484 - AppSense EM Agent - Configuration merge timeoutThe configuration merge has timed out waiting for expected filesAppSense.EM.8.Agent.Event.9484AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9495Event ID 9495 - AppSense EM Agent - Not configuredAppSense Environment Manager has not been configured.AppSense.EM.8.Agent.Event.9495AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9496Event ID 9496 - AppSense EM Agent - Configuration unsupportedAn old configuration has been found.AppSense.EM.8.Agent.Event.9496AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9501Event ID 9501 - AppSense EM Agent - Removable storage device has been disabledThe user has tried to access a device which has been disabled.AppSense.EM.8.Agent.Event.9501AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9502Event ID 9502 - AppSense EM Agent - Removable storage device has read-only accessThe user has tried to write to a device which has read-only access.AppSense.EM.8.Agent.Event.9502AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9650Event ID 9650 - AppSense EM Agent - Managed application startA managed application has started.AppSense.EM.8.Agent.Event.9650AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9651Event ID 9651 - AppSense EM Agent - Managed application stopA managed application has stopped.AppSense.EM.8.Agent.Event.9651AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9652Event ID 9652 - AppSense EM Agent - Personalization load errorPersonalization settings for a managed application failed to load.AppSense.EM.8.Agent.Event.9652AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9653Event ID 9653 - AppSense EM Agent - Personalization save errorPersonalization settings for a managed application failed to save.AppSense.EM.8.Agent.Event.9653AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9654Event ID 9654 - AppSense EM Agent - Blacklisted process startedA managed process has launched a blacklisted process.AppSense.EM.8.Agent.Event.9654AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9655Event ID 9655 - AppSense EM Agent - Personalization not savedPersonalization settings not saved as another group application is running.AppSense.EM.8.Agent.Event.9655AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9656Event ID 9656 - AppSense EM Agent - Offline resiliency save startedOffline resiliency save has been started for a managed application.AppSense.EM.8.Agent.Event.9656AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9657Event ID 9657 - AppSense EM Agent - Offline resiliency save completeOffline resiliency has successfully saved a managed application’s personalization settings.AppSense.EM.8.Agent.Event.9657AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9658Event ID 9658 - AppSense EM Agent - Personalization settings purgedPersonalization settings purged as offline mode disabled.AppSense.EM.8.Agent.Event.9658AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9659Event ID 9659 - AppSense EM Agent - Personalization settings updatedUser personalization settings updated from personalization server.AppSense.EM.8.Agent.Event.9659AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9660Event ID 9660 - AppSense EM Agent - Personalization failedPersonalization for a managed application failed.AppSense.EM.8.Agent.Event.9660AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9661Event ID 9661 - AppSense EM Agent - Timeout Communicating with Personalization ServerA timeout occurred whilst trying to communicate with the Personalization Server.AppSense.EM.8.Agent.Event.9661AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.9662Event ID 9662 - AppSense EM Agent - Trigger Action TimesAll the actions have run for the trigger.AppSense.EM.8.Agent.Event.9662AppSense.EM.8.AgentEventCollectionTrue00FalseTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9483Alert ID 9483 - AppSense EM Agent - Configuration merge fail AlertThe configuration merge has failed.AppSense.EM.8.Agent.Event.Alrt.9483AppSense.EM.8.AgentAlertTrue00TrueErrorHighTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9484Alert ID 9484 - AppSense EM Agent - Configuration merge timeout AlertThe configuration merge has timed out waiting for expected filesAppSense.EM.8.Agent.Event.Alrt.9484AppSense.EM.8.AgentAlertTrue00TrueWarningNormalTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9652Alert ID 9652 - AppSense EM Agent - Personalization load error AlertPersonalization settings for a managed application failed to load.AppSense.EM.8.Agent.Event.Alrt.9652AppSense.EM.8.AgentAlertTrue00TrueErrorHighTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9653Alert ID 9653 - AppSense EM Agent - Personalization save error AlertPersonalization settings for a managed application failed to save.AppSense.EM.8.Agent.Event.Alrt.9653AppSense.EM.8.AgentAlertTrue00TrueErrorHighTrueApplication
AppSense.EM.8.Agent.Event.Alrt.9661Alert ID 9661 - AppSense EM Agent - Timeout Communicating with Personalization Server AlertA timeout occurred whilst trying to communicate with the Personalization Server.AppSense.EM.8.Agent.Event.Alrt.9661AppSense.EM.8.AgentAlertTrue00TrueWarningNormalTrueApplication