Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

System

 

The system category contains events that are related to system changes, software installation, or status messages.

The following table describes the low-level event categories and associated severity levels for the system category.

Table 1: Low-level Categories and Severity Levels for the System Events Category

Low-level event category

Category ID

Description

Severity level (0 - 10)

Unknown System Event

8001

Indicates an unknown system event.

1

System Boot

8002

Indicates a system restart.

1

System Configuration

8003

Indicates a change in the system configuration.

1

System Halt

8004

Indicates that the system was halted.

1

System Failure

8005

Indicates a system failure.

6

System Status

8006

Indicates any information event.

1

System Error

8007

Indicates a system error.

3

Misc System Event

8008

Indicates a miscellaneous system event.

1

Service Started

8009

Indicates that system services started.

1

Service Stopped

8010

Indicates that system services stopped.

1

Service Failure

8011

Indicates a system failure.

6

Successful Registry Modification

8012

Indicates that a modification to the registry was successful.

1

Successful Host-Policy Modification

8013

Indicates that a modification to the host policy was successful.

1

Successful File Modification

8014

Indicates that a modification to a file was successful.

1

Successful Stack Modification

8015

Indicates that a modification to the stack was successful.

1

Successful Application Modification

8016

Indicates that a modification to the application was successful.

1

Successful Configuration Modification

8017

Indicates that a modification to the configuration was successful.

1

Successful Service Modification

8018

Indicates that a modification to a service was successful.

1

Failed Registry Modification

8019

Indicates that a modification to the registry failed.

1

Failed Host-Policy Modification

8020

Indicates that a modification to the host policy failed.

1

Failed File Modification

8021

Indicates that a modification to a file failed.

1

Failed Stack Modification

8022

Indicates that a modification to the stack failed.

1

Failed Application Modification

8023

Indicates that a modification to an application failed.

1

Failed Configuration Modification

8024

Indicates that a modification to the configuration failed.

1

Failed Service Modification

8025

Indicates that a modification to the service failed.

1

Registry Addition

8026

Indicates that a new item was added to the registry.

1

Host-Policy Created

8027

Indicates that a new entry was added to the registry.

1

File Created

8028

Indicates that a new was created in the system.

1

Application Installed

8029

Indicates that a new application was installed on the system.

1

Service Installed

8030

Indicates that a new service was installed on the system.

1

Registry Deletion

8031

Indicates that a registry entry was deleted.

1

Host-Policy Deleted

8032

Indicates that a host policy entry was deleted.

1

File Deleted

8033

Indicates that a file was deleted.

1

Application Uninstalled

8034

Indicates that an application was uninstalled.

1

Service Uninstalled

8035

Indicates that a service was uninstalled.

1

System Informational

8036

Indicates system information.

3

System Action Allow

8037

Indicates that an attempted action on the system was authorized.

3

System Action Deny

8038

Indicates that an attempted action on the system was denied.

4

Cron

8039

Indicates a crontab message.

1

Cron Status

8040

Indicates a crontab status message.

1

Cron Failed

8041

Indicates a crontab failure message.

4

Cron Successful

8042

Indicates a crontab success message.

1

Daemon

8043

Indicates a daemon message.

1

Daemon Status

8044

Indicates a daemon status message.

1

Daemon Failed

8045

Indicates a daemon failure message.

4

Daemon Successful

8046

Indicates a daemon success message.

1

Kernel

8047

Indicates a kernel message.

1

Kernel Status

8048

Indicates a kernel status message.

1

Kernel Failed

8049

Indicates a kernel failure message.

 

Kernel Successful

8050

Indicates a kernel successful message.

1

Authentication

8051

Indicates an authentication message.

1

Information

8052

Indicates an informational message.

2

Notice

8053

Indicates a notice message.

3

Warning

8054

Indicates a warning message.

5

Error

8055

Indicates an error message.

7

Critical

8056

Indicates a critical message.

9

Debug

8057

Indicates a debug message.

1

Messages

8058

Indicates a generic message.

1

Privilege Access

8059

Indicates that privilege access was attempted.

3

Alert

8060

Indicates an alert message.

9

Emergency

8061

Indicates an emergency message.

9

SNMP Status

8062

Indicates an SNMP status message.

1

FTP Status

8063

Indicates an FTP status message.

1

NTP Status

8064

Indicates an NTP status message.

1

Access Point Radio Failure

8065

Indicates an access point radio failure.

3

Encryption Protocol Configuration Mismatch

8066

Indicates an encryption protocol configuration mismatch.

3

Client Device or Authentication Server Misconfigured

8067

Indicates that a client device or authentication server was not configured properly.

5

Hot Standby Enable Failed

8068

Indicates a hot standby enable failure.

5

Hot Standby Disable Failed

8069

Indicates a hot standby disable failure.

5

Hot Standby Enabled Successfully

8070

Indicates that hot standby was enabled successfully.

1

Hot Standby Association Lost

8071

Indicates that a hot standby association was lost.

5

MainMode Initiation Failure

8072

Indicates MainMode initiation failure.

5

MainMode Initiation Succeeded

8073

Indicates that the MainMode initiation was successful.

1

MainMode Status

8074

Indicates a MainMode status message was reported.

1

QuickMode Initiation Failure

8075

Indicates that the QuickMode initiation failed.

5

Quickmode Initiation Succeeded

8076

Indicates that the QuickMode initiation was successful.

1

Quickmode Status

8077

Indicates a QuickMode status message was reported.

1

Invalid License

8078

Indicates an invalid license.

3

License Expired

8079

Indicates an expired license.

3

New License Applied

8080

Indicates a new license applied.

1

License Error

8081

Indicates a license error.

5

License Status

8082

Indicates a license status message.

1

Configuration Error

8083

Indicates that a configuration error was detected.

5

Service Disruption

8084

Indicates that a service disruption was detected.

5

EPS or FPM allocation exceeded

8085

Indicates that the license pool allocations for EPS or FPM were exceeded.

3

Performance Status

8086

Indicates that the performance status was reported.

1

Performance Degradation

8087

Indicates that the performance is being degraded.

4

Misconfiguration

8088

Indicates that an incorrect configuration was detected.

5

Related Documentation