Server audit events

Last updated September 25th, 2024

This page lists event categories and audit events available for the Knox Manage server. The tables provide the audit events grouped under each event category, such as AD/LDAP Sync, Administrator, Android Enterprise, and so on.

AD/LDAP Sync

Event ID	Event name
CSYN0039	Start external sync operation
CSYN0040	Stop external sync operation
CSYN0041	Automatically send profile to target users after synchronization ends
CSYN0042	Request managed apps mapping action to target users after synchronization ends
CSYN0043	Groups added via synchronization
CSYN0044	Groups deleted via synchronization
CSYN0045	Groups modified via synchronization
CSYN0046	Group sync overridden by the Settings
CSYN0047	Invalid group sync attempt
CSYN0079	Register automatic synchronization schedule
CSYN0080	Unschedule automatic synchronization
CUSR0020	Add User By Sync
CUSR0021	Modify User By Sync
CUSR0022	Delete User By Sync
CUSR0024	Error Occurred While Synching User
CUSR0025	Add Organization By Sync
CUSR0026	Modify Organization By Sync
CUSR0027	Delete Organization By Sync
CUSR0029	Error Occurred While Synching Organization
CUSR0030	Initialize Sync Process
CUSR0031	Finish Sync

Administrator

Event ID	Event name
CCON0073	Delete the export files that have elapsed the retention period

Android Enterprise

Event ID	Event name
CDEV0044	Failed to request the authentication token for Android Enterprise device enrollment
CDEV0045	Failed to update Google Device Id (Google → Device)

Android Management API

Event ID	Event name
CDEV0101	Load User Assignment Data for AMAPI Device Management
CDEV0102	Insert User Assignment Data for AMAPI Device Management
CDEV0103	Update User Assignment Data for AMAPI Device Management
CDEV0104	Assign Users for AMAPI Device Management

Application

Event ID	Event name
CAPP0044	Modify App Status Due To App Service Expiration Date
CAPP0088	Failed to import the app information from the multiple apps
CAPP0101	Request the Uninstall App device command in a group or organization
CAPP0103	Request to transfer App Install Device Command to assigned device
CAPP0105	App Deployment Scheduler
CAPP0106	Start App Deployment Scheduler
CAPP0107	End App Deployment Scheduler
CAPP0108	Start to Generate Google Play Store iframe token for Chrome OS
CAPP0109	Request Google API to Generate Google Play Store iframe token for Chrome OS
CAPP0110	Complete to Generate Google Play Store iframe token for Chrome OS
CAPP0118	Complete to Approve App Permissions for Chrome OS
CAPP0119	Start to Retrieve Schema of Configurable Properties for Chrome OS
CAPP0120	Request Google API to Retrieve Schema of Configurable Properties for Chrome OS
CAPP0121	Complete to Retrieve Schema of Configurable Properties for Chrome OS
CAPP0122	Start to Retrieve Managed Google Play App for Chrome OS
CAPP0123	Request Google API to Retrieve Managed Google Play App for Chrome OS
CAPP0124	Complete to Retrieve Managed Google Play App for Chrome OS
CAPP0125	Start to Retrieve App Details for Chrome OS
CAPP0126	Request Google API to Retrieve App Details for Chrome OS
CAPP0127	Complete to Retrieve App Details for Chrome OS
CAPP0128	Start to Get List of Assigned App by Organization for Chrome OS
CAPP0129	Request Google API to Get List of Assigned App by Organization for Chrome OS
CAPP0130	Complete to Get List of Assigned App by Organization for Chrome OS
CAPP0131	Start to Get List of App Settings Schema
CAPP0132	Request Google API to Get List of App Settings Schema
CAPP0133	Complete to Get List of App Settings Schema
CAPP0134	Start Syncing App Feedback (EMM API)
CAPP0135	Start Syncing App Feedback (AMAPI)
CAPP0136	Update App Feedback
CAPP0137	Start Retrieving List of Kiosk Apps Assigned by Organization (for Chrome OS)
CAPP0138	Finish Retrieving List of Kiosk Apps Assigned by Organization (for Chrome OS)
CAPP0139	Start Retrieving List of Kiosk App Settings Schema (for Chrome OS)
CAPP0140	Finish Retrieving List of Kiosk App Settings Schema (for Chrome OS)
CAPP0141	Start Getting the List of Assigned Managed Guest Session Apps by Organization for Chrome OS
CAPP0142	Finish Getting the List of Assigned Managed Guest Session Apps by Organization for Chrome OS
CAPP0143	Start Getting the List of Managed Guest Session App Settings Schema
CAPP0144	Finish Getting the List of Managed Guest Session App Settings Schema
CAPP0145	Start Getting the Detailed Information of Devices for Chrome OS
CAPP0146	Finish Getting the Detailed Information of Devices for Chrome OS
CAPP0172	Public App Auto Update Result

Automated Device Enrollment

Event ID	Event name
CDEP0008	Start ADE Device Sync Scheduler
CDEP0009	End ADE Device Sync Scheduler
CDEP0010	ADE Device Sync (Server)
CDEP0014	Request ADE device information
CDEP0015	Response ADE device information
CDEP0020	Request Bulk Assigning Users (ADE)
CDEP0021	Load Bulk Assignment Data from Excel (ADE)
CDEP0022	Add Bulk Assignment Device Data (ADE)
CDEP0023	Edit Bulk Assignment Device Data (ADE)
CPRV0156	Request MDM Profile Creation
CPRV0157	Response to MDM Profile Creation

ChromeOS

Event ID	Event name
CCON0082	Test Google API Connection (Chrome OS)
CCON0083	Google API Connection Test Results (Chrome OS)
CCON0084	Save the Google customer settings (Chrome OS)
CCON0085	Acquire the Access/Refresh tokens via Google API (Chrome OS)
CCON0086	Request the token (Chrome OS)
CCON0087	Create the credentials (Chrome OS)
CCON0088	The result of acquiring the Access/Refresh tokens (Chrome OS)
CCON0089	Google API to revoke the token and unregister with Google (Chrome OS)
CCON0090	The result of revoking the token and unregistering with Google (Chrome OS)
CCON0093	Complete to Bind Managed Google Play for Chrome OS
CCON0094	Start to Enroll Enterprise for Chrome OS
CCON0095	Request Google API to Enroll Enterprise for Chrome OS
CCON0096	Complete to Enroll Enterprise for Chrome OS
CCON0097	Start to Get ESA for Chrome OS
CCON0098	Request Google API to Get ESA for Chrome OS
CCON0099	Complete to Get ESA for Chrome OS
CCON0103	Start to Set Account to authenticate as the Enterprise for Chrome OS
CCON0104	Request Google API to Set Account to authenticate as the Enterprise for Chrome OS
CCON0105	Complete to Set Account to authenticate as the Enterprise for Chrome OS
CCON0107	Complete to Unbind Managed Google Play for Chrome OS
CCON0108	Start to Unenroll Enterprise for Chrome OS
CCON0109	Request Google API to Unenroll Enterprise for Chrome OS
CCON0110	Complete to Unenroll Enterprise for Chrome OS
CCON0131	Completed Chrome OS-Network setting creation
CCON0133	Completed Chrome OS-network settings deletion
CCON0134	Collect Chrome OS Location
CCON0139	Save the Consents of the Chrome OS Users and Devices to PP
CCON0140	Issue JWT for the KM Chrome Extension App
CCON0145	Geofencing Area Changed (out → in)
CCON0146	Geofencing Area Changed (in → out)
CCON0147	Report Geofencing Event

Compliance

Event ID	Event name
CCMP0001	Report policy violation
CCMP0011	Start Keepalive Check
CCMP0012	Close Keepalive Check
CCMP0013	Handle Keepalive violations
CCMP0014	Check Point MTP Malware detection information
CCMP0015	Change to Disconnected state by Keepalive
CCMP0016	Run Keepalive task
CCMP0017	No Keepalive task or not configured
CCMP0018	Send email with the expected disconnection time of device(s) by Keepalive
CCMP0019	Verify the Signatures of the Log Files Sent from the Device
CCMP0020	Application Virus Scan
CCMP0021	Content Virus Scan
CCMP0022	Create Syslog Route
CCMP0023	Delete Syslog Route
CCMP0024	Send Syslog
CDEV0010	Update Device Status (Disconnected)

Connector

Event ID	Event name
CCNT0052	Delete Directory Connection Information

Content

Event ID	Event name
CMCM0004	Request Content List
CMCM0005	Report Content Status

Device

Event ID	Event name
CCMD0590	Duplicate Device Found
CCMD0609	Finish Issuing the Commands for Kiosk Devices (Screenshot Set Volume)
CCMD0610	Finish Getting the Detailed Information of Device Commands for Chrome OS
CDEV0047	Register a Device Token for Push
CDEV0097	Change License (Server)
CDEV0098	Update Device License (Server)
CDEV0099	Register Device License (Server)
CDEV0100	Deactivate device (Off-line)

Device Command

Event ID	Event name
CCMD0001	Push Profile (Device Command Transfer)
CCMD0002	Push Profile (Device Command Transfer)
CCMD0003	Apply Latest Internal App Information (Device command transmit)
CCMD0004	Implement User-defined event - Activate (Device control transmit)
CCMD0005	Implement User-defined event - Deactivate (Device control transmit)
CCMD0006	Implement Gate event - Activate (Device command transmit)
CCMD0007	Implement Gate event - Deactivate (Device command transmit)
CCMD0008	Disable Exchange block - Activate (Device command transmit)
CCMD0009	Disable Exchange block - Deactivate (Device command transmit)
CCMD0010	Install app (Device command transmit)
CCMD0011	Implement app (Device command transmit)
CCMD0012	Close app (Device command transmit)
CCMD0013	Delete App Data (Device command transmit)
CCMD0014	Delete app (Device command transmit)
CCMD0015	Enable App Running (Device command transmit)
CCMD0016	Disable App Running (Device command transmit)
CCMD0017	Lock/Unlock the device - Lock (Device command transmit)
CCMD0018	Lock/Unlock the device - Unlock (Device command transmit)
CCMD0019	Clear Screen Lock (Device Command Transfer)
CCMD0020	Factory reset (Device command transmit)
CCMD0021	Power off the device (Device command transmit)
CCMD0022	Reboot Device (Device command transmit)
CCMD0023	Initialize external SD card (Device command transmit)
CCMD0024	Activate/Deactivate CC mode - Activate (Device control transmit)
CCMD0025	Activate/Deactivate CC mode - Deactivate (Device control transmit)
CCMD0026	Initialize information on blocking (Device command transmit)
CCMD0027	Deactivate service (Device command transmit)
CCMD0028	Collect Audit log -Agent (Device command transmit)
CCMD0029	Collect log -Agent (Device command transmit)
CCMD0030	Collect diagnosis information (Device command transmit)
CCMD0031	Update License (Device command transmit)
CCMD0032	Update Knox Manage Agent (Device command transmit)
CCMD0033	H/W status (Device command transmit)
CCMD0034	List of apps installed (Device command transmit)
CCMD0035	Location (Device command transmit)
CCMD0036	SIM verification (Device command transmit)
CCMD0037	Report the status (Device command transmit)
CCMD0038	Lock/Unlock container - Lock (Device command transmit)
CCMD0039	Lock/Unlock container - Unlock (Device command transmit)
CCMD0040	Reset Knox Workspace Password (Device command transmit)
CCMD0041	Delete container (Device command transmit)
CCMD0042	Install container app (Device command transmit)
CCMD0043	Run container app (Device command transmit)
CCMD0044	Close container app (Device command transmit)
CCMD0045	Delete container app data (Device command transmit)
CCMD0046	Delete container app (Device command transmit)
CCMD0047	Push Profile (Device Command Transfer)
CCMD0048	Push Profile:Client (Device Command Transfer)
CCMD0049	Check if a device has been rooted (Device command transmit)
CCMD0050	Unlock Knox Manage Agent (Device command transmit)
CCMD0051	Send a message (Device command transmit)
CCMD0052	Delete Account (Device command transmit)
CCMD0053	Lock EMM Client (Device command transmit)
CCMD0054	Collect Audit log - Client (Device command transmit)
CCMD0055	Collect log - Client (Device command transmit)
CCMD0056	Collect diagnosis information (Device command transmit)
CCMD0057	Update user information (Device command transmit)
CCMD0058	Update system app (Device command transmit)
CCMD0059	Location (Device command transmit)
CCMD0060	Apply security policy (Device command transmit)
CCMD0061	Apply security policy - Deactivate (Device command transmit)
CCMD0062	Transfer event information (Device command transmit)
CCMD0063	Install AndroidForWork app (Device command transmit)
CCMD0064	Delete Android For Work app (Device command transmit)
CCMD0065	Deactivate service (Device command transmit)
CCMD0066	Invite program (Device command transmit)
CCMD0067	Check if an app has been installed (Device command transmit)
CCMD0068	Activate event to time - Deactivate (Device command transmit)
CCMD0069	Activate event to time - Activate (Device command transmit)
CCMD0070	Notice of a fail to activate service (Device command transmit)
CCMD0071	Request to activate visitor policy request (Device command transmit)
CCMD0073	Agent Invalid protocol
CCMD0074	Agent Invalid request
CCMD0075	Agent Request to Push Profile (Device → Server)
CCMD0076	Agent Response to the Push Profile Request (Server → Device)
CCMD0077	Agent Request to enable/disable event (Device → Server)
CCMD0078	Agent Respond to the request to enable/disable event (Server → Device)
CCMD0079	Agent Request to block Exchange (Device → Server)
CCMD0080	Agent Respond to the request to block Exchange (Server → Device)
CCMD0081	Agent Request to disable blocking Exchange (Device → Server)
CCMD0082	Agent Respond to the request to disable blocking Exchange (Device → Server)
CCMD0083	Agent Request to install app (Device → Server)
CCMD0084	Agent Respond to the request to install app (Server → Device)
CCMD0085	Agent Request to run app (Device → Server)
CCMD0086	Agent Respond to the request to run app (Server → Device)
CCMD0087	Agent Request to close app (Device → Server)
CCMD0088	Agent Respond to the request to close app (Server → Device)
CCMD0089	Agent Request to delete app data (Device → Server)
CCMD0090	Agent Respond to the request to delete app data (Server → Device)
CCMD0091	Agent Request to delete app (Device → Server)
CCMD0092	Agent Respond to the request to delete app (Server → Device)
CCMD0093	Agent Request to allow running app (Device → Server)
CCMD0094	Agent Respond to the request to allow running app (Server → Device)
CCMD0095	Agent Request to disallow running app (Device → Server)
CCMD0096	Agent Respond to the request to disallow running app (Server → Device)
CCMD0097	Agent Request to lock screen (Device → Server)
CCMD0098	Agent Respond to the request to lock device (Server → Device)
CCMD0099	Agent Request to unlock device (Device → Server)
CCMD0100	Agent Respond to the request to unlock device (Server → Device)
CCMD0101	Agent Request to Clear Screen Lock (Device → Server)
CCMD0102	Agent Response to the Clear Screen Lock Request (Server → Device)
CCMD0103	Agent Request factory reset (Device → Server)
CCMD0104	Agent Respond to the request for factory reset (Server → Device)
CCMD0105	Agent Request to power off device (Device → Server)
CCMD0106	Agent Respond to the request to power off device (Server → Device)
CCMD0107	Agent Request to reboot device (Device → Server)
CCMD0108	Agent Respond to the request to reboot device ( Server → Device)
CCMD0109	Agent Request to initialize external SD card (Device → Server)
CCMD0110	Agent Respond to the request to initialize external SD card (Server → Device)
CCMD0115	Agent Request to collect device information (Device → Server)
CCMD0116	Agent Respond to the request to collect device information (Server → Device)
CCMD0117	Agent Request to update license (Device → Server)
CCMD0118	Agent Respond to the request to update license (Server → Device)
CCMD0119	Agent Request to update Knox Manage agent (Device → Server)
CCMD0120	Agent Respond to the request to update Knox Manage Agent (Server → Device)
CCMD0121	Agent Request for SIM verification ( Device → Server)
CCMD0122	Agent Respond to the request for SIM verification (Server → Device)
CCMD0123	Agent Request to lock container (Device → Server)
CCMD0124	Agent Respond to the request to lock container (Server → Device)
CCMD0125	Agent Request to unlock container (Device → Server)
CCMD0126	Agent Respond to the request to unlock container (Server → Device)
CCMD0127	Agent Request to reset Knox Workspace password (Device → Server)
CCMD0128	Agent Respond to the request to reset Knox Workspace password (Server → Device)
CCMD0129	Agent Request to delete container (Device → Server)
CCMD0130	Agent Respond to the request to delete container (Server → Device)
CCMD0131	Agent Request to install container app (Device → Server)
CCMD0132	Agent Respond to the request to install container app (Server → Device)
CCMD0133	Agent Request to run container app (Device → Server)
CCMD0134	Agent Respond to the request to run container app (Server → Device)
CCMD0135	Agent Request to close container app (Device → Server)
CCMD0136	Agent Respond to the request to close container app (Server → Device)
CCMD0137	Agent Request to delete container app data (Device → Server)
CCMD0138	Agent Respond to the request to delete container app data (Server → Device)
CCMD0139	Agent Request to delete container app (Device → Server)
CCMD0140	Agent Respond to the request to delete container app (Server → Device)
CCMD0141	Agent Request to report policy violation (Device → Server)
CCMD0142	Agent Respond to the request to report policy violation (Server → Device)
CCMD0143	Agent Request to reissue code to disable service (Device → Server)
CCMD0144	Agent Respond to the request to reissue code to disable service (Server → Device)
CCMD0145	Agent Request for Attestation Nonce (Device → Server)
CCMD0146	Agent Respond to the request for Attestation Nonce (Server → Device)
CCMD0147	Agent Request for Attestation verification (Device-> Server)
CCMD0148	Agent Respond to the request for Attestation verification (Server → Device)
CCMD0149	Agent Request for app information (Device → Server)
CCMD0150	Agent Respond to the request for app information (Server → Device)
CCMD0151	Agent Request to install Android for Work app (Device-> Server)
CCMD0152	Agent Respond to the request to install Android for Work app (Server-> Device)
CCMD0153	Agent Request to delete Android for Work app (Device-> Server)
CCMD0154	Agent Respond to the request to delete Android for Work app (Server-> Device)
CCMD0155	Agent Request to collect diagnosis information (Device → Server)
CCMD0156	Agent Respond to the request to collect diagnosis information (Server → Device)
CCMD0157	Agent Request for work report (Device → Server)
CCMD0158	Agent Respond to the request for work report (Server → Device)
CCMD0159	Agent Request for command (Device → Server)
CCMD0160	Agent Install profile (Server → Device)
CCMD0161	Agent Delete profile (Server → Device)
CCMD0162	Agent Search information on apps installed (Server → Device)
CCMD0163	Agent Search device information (Server → Device)
CCMD0164	Agent Search security information (Server → Device)
CCMD0165	Agent Device lock (Server → Device)
CCMD0166	Agent Reset password (Server → Device)
CCMD0167	Agent Factory reset (Server → Device)
CCMD0168	Agent Install app (Server → Device)
CCMD0169	Agent Information on apps installed through MDM
CCMD0170	Agent Delete app (Server → Device)
CCMD0171	Agent Set app properties (Server → Device)
CCMD0172	Agent Set the items included in app settings (Server → Device)
CCMD0173	Agent Information on Settings of apps installed through MDM (Server → Device)
CCMD0174	Agent Information on properties of apps installed through MDM (Server → Device)
CCMD0175	Agent Feedback on settings of apps installed through MDM (Server → Device)
CCMD0176	Agent Initialize information on blocking (Server → Device)
CCMD0177	Agent Report status (Server → Device)
CCMD0178	Agent Respond to the request to handle command (Device → Server)
CCMD0179	Client Perform Server Init logic (Device → Server)
CCMD0180	Client Request to Push Profile (Device → Server)
CCMD0181	Client Response to the Push Profile Request (Server → Device)
CCMD0182	Client Request for work report (Device → Server)
CCMD0183	Client Respond to the request for work report (Server → Device)
CCMD0184	Client Request to activate application of security policy (Device → Server)
CCMD0185	Client Respond to the request to activate application of security policy (Server → Device)
CCMD0186	Client Request to deactivate application of security policy (Device → Server)
CCMD0187	Client Respond to the request to deactivate application of security policy (Server → Device)
CCMD0188	Client Request to delete security policy profile (Device → Server)
CCMD0189	Client Respond to the request to delete security policy profile (Server → Device)
CCMD0190	Client Request to backup bookmarks (Device → Server)
CCMD0191	Client Respond to the request to backup bookmarks (Server → Device)
CCMD0192	Client Request to backup homepages (Device → Server)
CCMD0193	Client Respond to the request to backup homepages (Server → Device)
CCMD0194	Client Request to send Device command (EMM Agent) (Device -> Server)
CCMD0195	Client Respond to the request to send Device command (EMM Agent) (Server-> Device)
CCMD0197	Handle multiple devices by sending device command
CCMD0198	Insert command
CCMD0199	Select command
CCMD0200	Delete command
CCMD0201	Update command
CCMD0202	Delete commands left due to unenrollment command
CCMD0203	Duplicated Command
CCMD0204	Delete records of policy violation (Device → Server)
CCMD0205	Delete records of policy violation (Server → Device)
CCMD0206	Agent Request for command (Device → Server)
CCMD0207	Agent Request for command (Server → Device)
CCMD0208	Client Request for command (Device → Server)
CCMD0209	Client Request for command (Server → Device)
CCMD0210	Custom device command (Send device command)
CCMD0211	Request for command (Device → Server)
CCMD0212	Push Profile (Server → Device)
CCMD0213	Collect device information (Server → Device)
CCMD0214	Device lock (Server → Device)
CCMD0215	Factory reset (Server → Device)
CCMD0216	Custom device command (Server-> Device)
CCMD0217	Respond to the request to handle command (Device → Server)
CCMD0218	Start SyncML Session (Device → Server)
CCMD0219	Close SyncML Session (Server → Device)
CCMD0220	Register Push (WNS PFN) (Server → Device)
CCMD0221	Sync Device Information (Device command transmit)
CCMD0222	Collect H/W Status (Device command transmit)
CCMD0223	Collect app information (Device command transmit)
CCMD0224	Collect Current Location (Device command transmit)
CCMD0225	Collect audit information (Device command transmit)
CCMD0226	Collect log information (Device command transmit)
CCMD0227	Download content (Device command transmit)
CCMD0228	Update Enterprise Fota Firmware Version (Device command transmit)
CCMD0229	Agent Request to collect device and app information (Device → Server)
CCMD0230	Agent Respond to the request to collect device and app information (Server → Device)
CCMD0231	Agent Request to collect device information (Device → Server)
CCMD0232	Agent Respond to the request to collect device information (Server → Device)
CCMD0233	Agent Request to collect app information (Device → Server)
CCMD0234	Agent Respond to the request to collect app information (Server → Device)
CCMD0235	Agent Request to collect device and current location information (Device → Server)
CCMD0236	Agent Respond to the request to collect device and current location information (Server → Device)
CCMD0237	Agent Request to collect device and audit information (Device → Server)
CCMD0238	Agent Respond to the request to collect device and audit information (Server → Device)
CCMD0239	Agent Request to collect device and log information (Device → Server)
CCMD0240	Agent Respond to the request to collect device and log information (Server → Device)
CCMD0241	Agent Request to download content (Device → Server)
CCMD0242	Agent Respond to the request to download content (Server → Device)
CCMD0243	Agent Request to update enterprise fota firmware version (Device → Server)
CCMD0244	Agent Respond to the request to update enterprise fota firmware version (Server → Device)
CCMD0245	Deactivate MDM agent for synchronization between server and device
CCMD0246	Deactivate MDM agent for synchronization between server and device
CCMD0247	Flush command queue (Device command transmit)
CCMD0248	H/W status (Device command transmit)
CCMD0249	List of apps installed (Device command transmit)
CCMD0250	Push Profile (Device Command Transfer)
CCMD0251	Send an INI File (Device → Server)
CCMD0252	Get device status (Device → Server)
CCMD0253	Send an INI File (Server → Device)
CCMD0254	Get device status (Server → Device)
CCMD0255	Collect Audit log - Client (Device command transmit)
CCMD0256	Collect log - Client (Device command transmit)
CCMD0257	Location (Device command transmit)
CCMD0258	Check if a device has been rooted (Device command transmit)
CCMD0259	Agent status report (Server → Device)
CCMD0303	Request for property sync of app auto deletion when deactivating (Device → Server)
CCMD0304	Respond to property sync of app auto deletion when deactivating (Server → Device)
CCMD0305	Request for profile deletion (Device → Server)
CCMD0306	Respond to profile deletion (Server → Device)
CCMD0307	Synchronize property of app auto deletion when deactivating (Device Command)
CCMD0308	Request for custom control (Device → Server)
CCMD0309	Respond to custom control (Server → Device)
CCMD0310	Respond to Agent command (Server → Device)
CCMD0311	Request for external SD card authentication (Device → Server)
CCMD0312	Respond to external SD card authentication (Server → Device)
CCMD0313	Authenticate external SD card (Device Command)
CCMD0314	Uninstall Application (MTP) (Device → Server)
CCMD0315	Uninstall Application (MTP) (Server → Device)
CCMD0316	Uninstall Application (MTP) (Device command transmit)
CCMD0317	Activate-Exception Profile
CCMD0318	Deactivate-Exception Profile
CCMD0319	Update event time (Device command transmit)
CCMD0320	Device command transmission for each area in one device.
CCMD0321	Device command transmission for each area in multiple devices.
CCMD0345	CSM deactivate (Device command transmit)
CCMD0361	Succeeded to remove Geofencing event
CCMD0362	Client Request for policy summary (Device → Server)
CCMD0363	Client Respond for policy summary (Server → Device)
CCMD0364	Collect EMM Client information (Server → Device)
CCMD0365	Update Agent User information (Server → Device)
CCMD0368	Reset data usage (Device command transmit)
CCMD0369	Reset number of calls (Device command transmit)
CCMD0370	Agent Request to collect device and reset data usage (Device → Server)
CCMD0371	Agent Respond to the request to collect device and reset data usage (Server → Device)
CCMD0372	Agent Request to collect device and reset number of calls (Device → Server)
CCMD0373	Agent Respond to the request to collect device and reset number of calls (Server → Device)
CCMD0374	Mutiple devices distributed sending
CCMD0375	Failed to install apps (Server → Google)
CCMD0376	Request for Google managed app permission (Server → Google)
CCMD0377	Request for Management configuration of Google managed app (Server → Google)
CCMD0378	Request for Google managed app installation (Server → Google)
CCMD0379	Request for Google managed app uninstallation (Server → Google)
CCMD0380	Invite To Program (Response)
CCMD0381	Command queue retransmission is in progress.
CCMD0382	No target for command queue retransmission
CCMD0383	Command queue retransmission
CCMD0384	Command queue retransmission has started.
CCMD0385	Command queue retransmission is finished.
CCMD0386	Request for user authentication password reset (Device → Server)
CCMD0387	Response to user authentication password reset (Server → Device)
CCMD0388	Collect Profile ID (Device → Server)
CCMD0389	Collect Profile ID (Server → Device)
CCMD0390	Collect Profile ID (Send device control)
CCMD0393	Lock screen (Device command transmit)
CCMD0394	Attestation (Device command transmit)
CCMD0395	Certificate renewal (Device command transmit)
CCMD0396	Contents transfer
CCMD0397	Factory Reset (only) (Send Device Command)
CCMD0398	Agent Factory Reset (Only) request (Device → Server)
CCMD0399	Lock screen (Device → Server)
CCMD0400	Lock screen (Server → Device)
CCMD0401	Lock screen (Device command transmit)
CCMD0402	Play Integrity (SafetyNet Attestation) Nonce Request (Device → Server)
CCMD0403	Play Integrity (SafetyNet Attestation) Nonce Request (Server → Device)
CCMD0404	Play Integrity (SafetyNet Attestation) Nonce Request (Device command transfer)
CCMD0405	Play Integrity (SafetyNet Attestation) Verification Request (Device → Server)
CCMD0406	Play Integrity (SafetyNet Attestation) Verification Request (Server → Device)
CCMD0407	Play Integrity (SafetyNet Attestation) Verification Request (Device command transfer)
CCMD0408	Delete User Certificate (Device → Server)
CCMD0409	Delete User Certificate (Server → Device)
CCMD0410	Delete User Certificate (Device command transfer)
CCMD0411	Delete CA Certificate (Device → Server)
CCMD0412	Delete CA Certificate (Server → Device)
CCMD0413	Delete CA Certificate (Device command transfer)
CCMD0414	Delete CA Certificates for All Users (Device → Server)
CCMD0415	Delete CA Certificates for All Users (Server → Device)
CCMD0416	Delete CA Certificates for All Users (Device command transfer)
CCMD0417	Delete User Certificate for Work Profile (Device → Server)
CCMD0418	Delete User Certificate for Work Profile (Server → Device)
CCMD0419	Delete User Certificate for Work Profile (Device command transfer)
CCMD0420	Delete CA Certificate for Work Profile (Device → Server)
CCMD0421	Delete CA Certificate for Work Profile (Server → Device)
CCMD0422	Delete CA Certificate for Work Profile (Device command transfer)
CCMD0423	Delete All Users' CA Certificates for Work Profile (Device → Server)
CCMD0424	Delete All Users' CA Certificates for Work Profile (Server → Device)
CCMD0425	Delete All Users' CA Certificates for Work Profile (Device command transfer)
CCMD0426	Push token initialization
CCMD0427	Lock Screen (Device → Server)
CCMD0428	Lock Screen (Server → Device)
CCMD0430	Reset Push Token (Device → Server)
CCMD0431	Reset Push Token (Server → Device)
CCMD0433	Exit Kiosk Mode (Device → Server)
CCMD0434	Exit Kiosk Mode (Server → Device)
CCMD0435	Exit Kiosk Mode (Device Command Transfer)
CCMD0436	Change License (Device → Server)
CCMD0437	Change License (Server → Device)
CCMD0438	Change License (Device command transfer)
CCMD0439	Device App Feedback Request (Device → Server)
CCMD0440	Device App Feedback Response (Server → Device)
CCMD0444	Collect Bug Report (Device → Server)
CCMD0445	Collect Bug Report (Server → Device)
CCMD0446	Collect Bug Report (Device command transmit)
CCMD0447	External URL Application Installation (Device → Server)
CCMD0448	External URL Application Installation (Server → Device)
CCMD0449	External URL Application Installation (Device Command)
CCMD0451	Lock SIM Pin (Device → Server)
CCMD0452	Lock SIM Pin (Server → Device)
CCMD0453	Lock SIM Pin (Device command transfer)
CCMD0454	Unlock SIM Pin (Device → Server)
CCMD0455	Unlock SIM Pin (Server → Device)
CCMD0456	Unlock SIM Pin (Device command transfer)
CCMD0457	Update Exit Kiosk Code (Device → Server)
CCMD0458	Update Exit Kiosk Code (Server → Device)
CCMD0459	Update Exit Kiosk Code (Device Command Transfer)
CCMD0460	Reboot Device (Server → Device)
CCMD0461	Update Knox Manage Agent (Device → Server)
CCMD0462	Update Knox Manage Agent (Server → Device)
CCMD0463	Update Knox Manage Agent (Device command transfer)
CCMD0464	Attestation verification result is collected (server → Attestation server)
CCMD0465	Reboot Device (Device → Server)
CCMD0466	Switch to Fully Managed (Remove Work Profile) (Device → Server)
CCMD0467	Switch to Fully Managed (Remove Work Profile) (Server → Device)
CCMD0468	Switch to Fully Managed (Remove Work Profile) (Device command transfer)
CCMD0469	Device Status Change Result
CCMD0470	Agent Reboot Device (Server → Device)
CCMD0471	Agent Power off the device (Server → Device)
CCMD0472	OS Update (Device command transmit)
CCMD0473	Agent Enable Lost Mode (Server → Device)
CCMD0474	Enable Lost Mode (Device command transmit)
CCMD0475	Agent Disable Lost Mode (Server → Device)
CCMD0476	Disable Lost Mode (Device Control Transfer)
CCMD0477	Succeeded to add Geofencing event
CCMD0478	Scan Available OS Update (Server → Device)
CCMD0479	Schedule OS Update (Server → Device)
CCMD0480	Collect location info (Server → Device)
CCMD0481	Exit Shared Device Mode (Device → Server)
CCMD0482	Exit Shared Device Mode (Server → Device)
CCMD0483	Exit Shared Device Mode (Device command transfer)
CCMD0484	Delete User Data (Device → Server)
CCMD0485	Delete User Data (Server → Device)
CCMD0486	Delete User Data (Device command transfer)
CCMD0487	Check User Out (Device → Server)
CCMD0488	Check User Out (Server → Device)
CCMD0489	Check User Out (Device command transfer)
CCMD0490	Reset Managed Google Account (Device → Server)
CCMD0491	Reset Managed Google Account (Server → Device)
CCMD0492	Reset Managed Google Account (Device command transfer)
CCMD0493	Enroll Duplicate Device (Android)
CCMD0494	Enroll Duplicate Device (iOS)
CCMD0495	Create Public Key (Device → Server)
CCMD0496	Create Public Key (Server → Device)
CCMD0497	Create Public Key (Device command transfer)
CCMD0498	Report Unauthorized Container Installation Request
CCMD0499	Report Unauthorized Container Installation Response
CCMD0500	Report Unauthorized Container Installation device command
CCMD0504	Update the Knox Manage Client user information
CCMD0505	Update the Knox Manage Client user information (Server → Device)
CCMD0506	Request Knox Manage Client installation (Server → Device)
CCMD0507	Request Knox Manage Client installation status (Server → Device)
CCMD0508	Request the reason for app installation failure (Server → Device)
CCMD0509	Request the Agent activity report (Install App) (Device → Server)
CCMD0510	Request the Agent activity report (Install App) (Device → Server)
CCMD0511	Request the Agent activity report (Uninstall App) (Device → Server)
CCMD0512	Request the Agent activity report (Uninstall App) (Device → Server)
CCMD0513	Request the Agent activity report (Attestation) (Device → Server)
CCMD0514	Request the Agent Activity Report (Push Profile) (Device → Server)
CCMD0515	Request the Agent activity report (Configuration) (Device → Server)
CCMD0516	Request the Agent activity report (Install App) (Device → Server)
CCMD0517	Request the Agent activity report (Keepalive) (Device → Server)
CCMD0518	Request the Agent activity report (Location) (Device → Server)
CCMD0519	Respond to the Agent activity report (Event Profile) (Server → Device)
CCMD0520	Respond to the Agent activity report (Update License) (Server → Device)
CCMD0521	Respond to the Agent activity report (Change License) (Server → Device)
CCMD0522	Respond to the Agent activity report (Unenroll) (Server → Device)
CCMD0523	Respond to the Agent activity report (Install App) (Server → Device)
CCMD0524	Respond to the Agent activity report (Install App) (Server → Device)
CCMD0525	Respond to the Agent activity report (Install App) (Server → Device)
CCMD0526	Respond to the Agent activity report (Uninstall App) (Server → Device)
CCMD0527	Respond to the Agent activity report (Uninstall App) (Server → Device)
CCMD0528	Respond to the Agent activity report (Attestation) (Server → Device)
CCMD0529	Response to the Agent Activity Report (Push Profile) (Server → Device)
CCMD0530	Respond to the Agent activity report (Configuration) (Server → Device)
CCMD0531	Respond to the Agent activity report (Install App) (Server → Device)
CCMD0532	Respond to the Agent activity report (Keepalive) (Server → Device)
CCMD0533	Respond to the Agent activity report (Location) (Server → Device)
CCMD0534	Request the Agent activity report (Event Profile) (Device → Server)
CCMD0535	Request the Agent activity report (Update License) (Device → Server)
CCMD0536	Request the Agent activity report (Change License) (Device → Server)
CCMD0537	Request the Agent activity report (Unenroll) (Device → Server)
CCMD0538	Request the Agent activity report (Install App) (Device → Server)
CCMD0539	Request the Agent activity report (Knox Workspace) (Device → Server)
CCMD0540	Respond to the Agent activity report (Knox Workspace) (Server → Device)
CCMD0541	Call the Google API to request a lock (Chrome OS)
CCMD0542	The result of the lock request (Chrome OS)
CCMD0543	Call the Google API to request an unlock (Chrome OS)
CCMD0544	The result of the unlock request (Chrome OS)
CCMD0545	Call the Google API to request an unenrollment (Chrome OS)
CCMD0546	The result of the unenrollment request (Chrome OS)
CCMD0547	Call the Google API to request a factory reset (Chrome OS)
CCMD0548	The result of the factory reset request (Chrome OS)
CCMD0549	Call the Google API to delete a user profile (Chrome OS)
CCMD0550	The result of the user profile deletion request (Chrome OS)
CCMD0551	Call the Google API to request an unenrollment and factory reset (Chrome OS)
CCMD0552	The result of the unenrollment and factory reset request (Chrome OS)
CCMD0553	Delete Unauthorized Container (Device → Server)
CCMD0554	Delete Unauthorized Container (Server → Device)
CCMD0555	Delete Unauthorized Container (Device command transfer)
CCMD0556	Notification of application installation result (Device → Server)
CCMD0557	Assigned Application Install Request (Server → Device)
CCMD0558	Play Alarm Sound (Device → Server)
CCMD0559	Play Alarm Sound (Server → Device)
CCMD0560	Play Alarm Sound (Device command transfer)
CCMD0561	Assigned Application Update Request (Server → Device)
CCMD0562	Assigned Application Update Request (Device → Server)
CCMD0563	Assigned Application Update Request (Device command transfer)
CCMD0564	Request to install the app (Server → Device)
CCMD0565	Request to delete the app (Server → Device)
CCMD0566	Notification of application deletion result (Device → Server)
CCMD0567	Save User Information (Device → Server)
CCMD0568	Save User Information (Server → Device)
CCMD0569	Save User Information (Device command transfer)
CCMD0570	Check User Out (Device → Server)
CCMD0571	Check User Out (Server → Device)
CCMD0572	Update User Information (Device → Server)
CCMD0573	Update User Information (Server → Device)
CCMD0574	Update User Information (Device → Server)
CCMD0575	Update User Information (Server → Device)
CCMD0576	Update User Information (Device → Server)
CCMD0577	Update User Information (Server → Device)
CCMD0578	Request Device Command (Push Profile) (Server → Google)
CCMD0579	Request to device command (Unenroll Device) (Server → Google)
CCMD0580	Request Device Command (Clear Screen Lock) (Server → Google)
CCMD0581	Request to device command (Lock Screen) (Server → Google)
CCMD0582	Request Device Command (Push Profile) (Server → Google)
CCMD0583	Request to device command (Unenroll Device) (Server → Google)
CCMD0584	Request Device Command (Clear Screen Lock) (Server → Google)
CCMD0585	Request to device command (Lock Screen) (Server → Google)
CCMD0586	Request to device command (Reboot Device) (Server → Google)
CCMD0587	Shared iPad Settings (Device Command Transfer)
CCMD0588	Agent Shared iPad Settings (Server → Device)
CCMD0589	Agent Shared iPad Passcode Grace Period Settings (Server → Device)
CCMD0591	Request MS Entra ID User Settings Information (Server → Device)
CCMD0593	Set Device Name (Server → Device)
CCMD0594	Run Time Event - Activate (Server → Google)
CCMD0595	Run Time Event - Deactivate (Server → Google)
CCMD0596	Reapply KSP Wi-Fi Configurations (Device → Server)
CCMD0597	Reapply KSP Wi-Fi Configurations (Server → Device)
CCMD0598	Reapply KSP Wi-Fi Configurations (Device Command Transfer)
CCMD0599	Request Device Command (Clear Screen Lock) (Device → Server)
CCMD0600	Request Device Command (Lock Screen) (Device → Server)
CCMD0601	Request Device Command (Reboot Device) (Device → Server)
CCMD0602	Request Device Command (Push Profile) (Device → Server)
CCMD0603	Request Device Command (Unenroll Device) (Device → Server)
CCMD0604	Agent Response to the Clear Screen Lock Request (Server → Device)
CCMD0605	Request Device Command (Lock Screen) (Device → Server)
CCMD0606	Agent Respond to the request to reboot device ( Server → Device)
CCMD0607	Agent Response to the Push Profile Request (Server → Device)
CCMD0608	Request Device Command (Unenroll Device) (Device → Server)
CCMD0611	Setting App Configuration (Server → Device)
CCMD0612	Agent Request to Push Profile (Device → Server)
CCMD0613	Agent Request factory reset (Device → Server)
CCMD0614	Agent Respond to the request for factory reset (Server → Device)
CCMD0615	Agent Request to reboot device (Device → Server)
CCMD0616	Agent Request to Clear Screen Lock (Device → Server)
CCMD0617	Request to deactivate device (Device → Server)
CCMD0618	Respond to device deactivation request (Server → Device)
CCMD0619	Agent Request to update system app (Device → Server)
CCMD0620	Agent Respond to the request to update system app (Server → Device)
CCMD0621	Agent Request to collect device and audit information (Device → Server)
CCMD0622	Agent Respond to the request to collect device and audit information (Server → Device)
CCMD0623	Agent Request to collect device and log information (Device → Server)
CCMD0624	Agent Respond to the request to collect device and log information (Server → Device)
CCMD0625	Collect Bug Report (Device → Server)
CCMD0626	Collect Bug Report (Server → Device)
CCMD0627	Reset Push Token (Device → Server)
CCMD0628	Reset Push Token (Server → Device)
CCMD0629	Agent Request to collect device and app information (Device → Server)
CCMD0630	Agent Respond to the request to collect device and app information (Server → Device)
CCMD0631	Agent Request to collect app information (Device → Server)
CCMD0632	Agent Respond to the request to collect app information (Server → Device)
CCMD0633	Agent Request to install app (Device → Server)
CCMD0634	Agent Respond to the request to install app (Server → Device)
CCMD0635	Agent Request to delete app (Device → Server)
CCMD0636	Agent Respond to the request to delete app (Server → Device)
CCMD0637	Agent Request to collect device information (Device → Server)
CCMD0638	Agent Respond to the request to collect device information (Server → Device)
CCMD0639	Agent Request to update license (Device → Server)
CCMD0640	Agent Respond to the request to update license (Server → Device)
CCMD0641	Agent Request for app information (Device → Server)
CCMD0642	Agent Respond to the request for app information (Server → Device)
CCMD0643	Agent Request for work report (Device → Server)
CCMD0644	Agent Respond to the request for work report (Server → Device)
CCMD0645	Agent Request for command (Device → Server)
CCMD0646	Agent Request for command (Server → Device)
CCMD0647	Agent Request to collect device information (Device → Server)
CCMD0648	Agent Respond to the request to collect device information (Server → Device)
CCMD0649	Change License (Device → Server)
CCMD0650	Change License (Server → Device)
CCMD0651	Create Public Key (Device → Server)
CCMD0652	Create Public Key (Server → Device)
CCMD0653	Request the Agent activity report (Uninstall App) (Device → Server)
CCMD0654	Request the Agent Activity Report (Push Profile) (Device → Server)
CCMD0655	Request the Agent activity report (Configuration) (Device → Server)
CCMD0656	Request the Agent activity report (Install App) (Device → Server)
CCMD0657	Respond to the Agent activity report (Update License) (Server → Device)
CCMD0658	Respond to the Agent activity report (Change License) (Server → Device)
CCMD0659	Respond to the Agent activity report (Unenroll) (Server → Device)
CCMD0660	Respond to the Agent activity report (Install App) (Server → Device)
CCMD0661	Respond to the Agent activity report (Uninstall App) (Server → Device)
CCMD0662	Response to the Agent Activity Report (Push Profile) (Server → Device)
CCMD0663	Respond to the Agent activity report (Configuration) (Server → Device)
CCMD0664	Respond to the Agent activity report (Install App) (Server → Device)
CCMD0665	Request the Agent activity report (Update License) (Device → Server)
CCMD0666	Request the Agent activity report (Change License) (Device → Server)
CCMD0667	Request the Agent activity report (Unenroll) (Device → Server)
CCMD0668	Request the Agent activity report (Install App) (Device → Server)
CCMD0669	Contents deployment (send device command)
CCMD0670	Request to exit dedicated device mode (Device → Server)
CCMD0671	Respond to exit dedicated device mode (Server → Device)
CCMD0672	Exit Dedicated Device Mode (Device Command Transfer)
CCMD0673	Update eSIM Cellular Plan (Server → Device)
CCMD0674	Update eSIM Cellular Plan (Device → Server)
CCMD0675	Update eSIM Cellular Plan (Device command transfer)
CCMD0677	Agent Request for Contents Download URL information (Device → Server)
CCMD0678	Agent Respond to the request for Contents Download URL information (Server → Device)
CCMD0679	Unenroll MDM Agent for synchronization between server and device
CCMD0680	Agent Respond to the request for Internal App MC Applied Result Report (Device → Server)
CCMD0681	Succeeded to add Day & Time event
CCMD0682	Succeeded to remove Day & Time event
CCMD0683	Succeeded to add Applications event
CCMD0684	Succeeded to remove Applications event
CCMD0685	Succeeded to add Wi-Fi SSID event
CCMD0686	Succeeded to remove Wi-Fi SSID event
CCMD0687	Succeeded to add SIM Change event
CCMD0688	Succeeded to remove SIM Change event
CCMD0690	Succeeded to add Roaming event
CCMD0691	Succeeded to remove Roaming event
CCMD0692	Request to device command (Reboot Device) (Server → Google)
CCMD0693	Request to device command (Delete App Data) (Server → Google)
CCMD0694	Request Device Command (Reboot Device) (Device → Server)
CCMD0695	Agent Request to run app (Device → Server)
CCMD0696	Agent Respond to the request to run app (Server → Device)
CCMD0697	Agent Request to delete app data (Device → Server)
CCMD0698	Agent Respond to the request to delete app data (Server → Device)
CCMD0699	Agent Request to lock screen (Device → Server)
CCMD0700	Agent Respond to the request to lock device (Server → Device)
CCMD0701	Agent Request to unlock device (Device → Server)
CCMD0702	Agent Respond to the request to unlock device (Server → Device)
CCMD0703	Update Exit Kiosk Code (Device Command)
CCMD0704	Request to update exit kiosk code (Request)
CCMD0705	Respond to the request to update exit kiosk code (Response)
CCMD0706	Request to update device unenrollment code (Request)
CCMD0707	Respond to the request to update device unenrollment code (Response)
CCMD0708	Exit Kiosk Mode (Device → Server)
CCMD0709	Exit Kiosk Mode (Server → Device)
CCMD0710	Process Restricted Command Requests
CCMD0711	Process Restricted Command Requests
CCMD0714	Search Device Basic Info on the Server
CCMD0715	Process Restricted Command Requests
CCMD0716	Process Restricted Command Requests
CCMD0717	Device Command Request (Enable Lost Mode) (Server → Google)
CCMD0718	Device Command Request (Enable Lost Mode) (Device → Server)
CCMD0719	Device Command Request (Disable Lost Mode) (Server → Google)
CCMD0720	Device Command Request (Disable Lost Mode) (Device → Server)
CCMD0721	Device Usage Log (Disable Lost Mode by User) (Device → Server)
CCMD0722	Device Usage Log (Collect Current Location Information) (Device → Server)
CCMD0723	Enable Activation Lock (Device Command)
CCMD0724	MDM Options Settings (Server → Device)
CCMD0725	Collect Activation Lock Bypass Code (Device Command)
CCMD0726	Collect Activation Lock Bypass Code (Server → Device)
CCMD0727	Disable Activation Lock (Device → Server)
CCMD0728	Disable Activation Lock (Server → Device)
CCMD0730	Send Distributed Device Commands to Multiple Devices (Start)
CCMD0731	Send Distributed Device Commands to Multiple Devices (End)
CCMD0732	Reboot ChromeOS device
CCMD0733	Capture ChromeOS device log
CCMD0734	Export ChromeOS device log
CCMD0735	Wallpaper Settings (Server → Device)
CCMD0736	Invalid Client request
CCMD0737	Deactivate AMAPI client (Server → Device synchronization)
CCMD0738	Request the Client activity report (location) (Device → Server)
CCMD0739	Respond to the Client activity report (location) (Server → Device)
CCMD0740	Request the Client activity report (configuration) (Device → Server)
CCMD0741	Respond to the Client activity report (configuration) (Server → Device)
CCMD0742	Request the Client activity report (Privacy Policy) (Device → Server)
CCMD0743	Respond to the Client activity report (Privacy Policy) (Server → Device)
CCMD0744	Agent's Request for Push Profile (Device → Server)
CCMD0745	Agent's Response for the Push Profile Request (Server → Device)
CCMD0746	Client's Request for command (Device → Server)
CCMD0747	Client's Request for command (Server → Device)
CDCS0001	Delete Device Commands that are exceeded 90 days
CMCM0006	Contents deployment (send device command)
CMCM0007	Request for Agent contents deployment (Device → Server)
CMCM0008	Response to Agent contents deployment (Server → Device)
CPLC0024	Agent Device Command Fail on a Device
CPLC0025	Client Device Command Fail on a Device
CPLC0027	Agent Device Command Success on a Device
CPLC0028	Client Device Command Success on a Device
CTXH0001	Error (Device command queue)

E-FOTA

Event ID	Event name
CEFO0001	E-FOTA API - Get Token
CEFO0002	E-FOTA API - Register CorpID
CEFO0003	E-FOTA API - Get Firmware List
CEFO0004	E-FOTA API - Restrict Firmware
CEFO0010	E-FOTA API - check group version
CEFO0011	E-FOTA API - view product, model, and agency
CEFO0012	E-FOTA API - network error
CEFO0014	E-FOTA API - Get License Information
CEFO0034	E-FOTA history - Create group
CEFO0035	E-FOTA History - Edit group
CEFO0036	E-FOTA history - Delete group

Email

Event ID	Event name
CACS0018	Send Mail To User (Async)
CACS0019	Send Mail To Device (Async)
CACS0024	Send Mail To Admin (Async)
DSCH0004	Execute Mail Scheduler
DSCH0005	Execute Mail Schedule Job
DSCH0006	Generate OTP (One Time Password) Code

Enrollment

Event ID	Event name
CCMD0592	MS Entra ID Device Sync Request
CDEV0020	Prevent reactivation
CDEV0021	Prevent reactivation
CPRV0101	EMM Enrollment Spec (Device → Server)
CPRV0102	EMM Enrollment Spec (Server → Device)
CPRV0103	Update KLM/ELM license during activation (Device → Server)
CPRV0104	Update KLM/ELM license during activation (Server → Device)
CPRV0105	EMM Enrollment Spec (Device → Server)
CPRV0106	EMM Enrollment Spec (Server → Device)
CPRV0107	Disable service -Android (Device → Server)
CPRV0108	Disable service -Android (Server → Device)
CPRV0109	Confirm Enrollment (Knox) (Device → Server)
CPRV0110	Confirm Enrollment (Knox) (Server → Device)
CPRV0111	Agent Request to activate MDM (Device → Server)
CPRV0112	Agent Request to activate MDM (Server → Device)
CPRV0113	Agent Request for SCEP profile (Device → Server)
CPRV0114	Agent Request for SCEP profile (Server → Device)
CPRV0115	Agent Request for MDM profile (Device → Server)
CPRV0116	Agent Request for MDM profile (Server → Device)
CPRV0117	Agent Request for check-in (Device → Server)
CPRV0118	Agent Request for check-in (Server → Device)
CPRV0119	Agent Request for token update (Device → Server)
CPRV0120	Agent Request for token update (Server → Device)
CPRV0121	Agent Request for check-out (Device → Server)
CPRV0122	Agent Response for check-out (Server → Device)
CPRV0123	Deactivate service (Device → Server)
CPRV0124	Deactivate service (Server → Device)
CPRV0125	Request SOAP message
CPRV0126	Respond to SOAP message
CPRV0127	Request for discovery URL (Device → Server)
CPRV0128	Respond to the request for Discovery URL (Server → Device)
CPRV0129	Request for spec to issue certificate (Device → Server)
CPRV0130	Respond to the request for spec to issue certificate (Server → Device)
CPRV0131	Request to verify On-premise equipment (Device → Server)
CPRV0132	Respond to the request to verify On-premise equipment (Server → Device)
CPRV0133	Request to verify Federated equipment (Device → Server)
CPRV0134	Respond to the request to verify Federated equipment (Server → Device)
CPRV0135	Verify Security Token
CPRV0136	Request to issue certificate (Device → Server)
CPRV0137	Respond to request to issue certificate (Server → Device)
CPRV0138	Respond to the request to set DM Client
CPRV0139	Generate OTP (One Time Password) Code
CPRV0148	UMC User Search Request
CPRV0149	UMC User Search Response
CPRV0150	UMC Enrollment Request
CPRV0151	UMC Enrollment Response
CPRV0152	UMC Enrollment Information Update Request
CPRV0153	UMC Enrollment Information Update Response
CPRV0154	UMC Unenrollment Request
CPRV0155	UMC Unenrollment Response
CPRV0158	Request to activate Agent User Enrollment MDM (Device → Server)
CPRV0159	Request to activate Agent User Enrollment MDM (Server → Device)
CPRV0160	EMM Enrollment Spec (Device → Server)
CPRV0161	EMM Enrollment Spec (Server → Device)
CPRV0162	EMM Enrollment (Device → Server)
CPRV0163	EMM Enrollment (Server → Device)
CPRV0166	Register Management Type
CPRV0167	EMM Enrollment
CPRV0171	Add or Edit Device Info
CPRV0172	EMM EnrollmentSpec
CPRV0173	Limited Device Enrollment

Google sync

Event ID	Event name
CSYN0062	Check the readiness to start the synchronization service
CSYN0063	Started Google resource synchronization (All)
CSYN0064	Started Google resource synchronization (Organization)
CSYN0065	Google resource synchronization via Google API (Organization)
CSYN0066	Processed the Google resource synchronization DB (Organization)
CSYN0067	Stopped Google resource synchronization (Organization)
CSYN0068	Started Google resource synchronization (User)
CSYN0069	Google resource synchronization via Google API (User)
CSYN0070	Processed the Google resource synchronization DB (User)
CSYN0071	Stopped Google resource synchronization (User)
CSYN0072	Started Google resource synchronization (Device)
CSYN0073	Google resource synchronization via Google API (Device)
CSYN0074	Processed the Google resource synchronization DB (Device)
CSYN0075	Google resource synchronization via Google API (Policy)
CSYN0076	Stopped the Google resource synchronization (All)
CSYN0077	Started Google resource synchronization via the scheduler (All)
CSYN0078	Stopped Google resource synchronization via the scheduler (All)
CSYN0095	Start Licensing work for ChromeOS Device
CSYN0096	Complete Licensing work for ChromeOS Device

Group

Event ID	Event name
CDEV0124	Copy Attributes Assigned to Groups

Identity & Directory

Event ID	Event name
CUSR0023	Ignore Directory Synced User
CUSR0028	Ignore Directory Synced Organization
CCON0091	MS Entra ID Admin Approval Result Renewal
CCON0111	Request MS Entra ID Information (Server → CRS)
CSYN0097	Sync Execution Warning

Inventory Scheduler

Event ID	Event name
CINV0003	Start Inventory Collection Scheduler for iOS
CINV0004	Terminate Inventory Collection Scheduler for iOS

License

Event ID	Event name
DLIC0004	Add Knox License
DLIC0005	Revision Knox License
DLIC0006	Delete Knox License
DLIC0007	Sync Knox License
DLIC0008	Interface Knox License
DLIC0009	Knox Suite enrolled device License Management System interface
DLIC0010	Knox Suite unenrolled device License Management System interface
DLIC0011	Synchronize LMS for Deleting License
DLIC0012	Executing SLM Interface Schedule
DLIC0013	Register the license assigned to the customer
DLIC0014	License Name Update
DLIC0015	Deactivate Serial Number (16 Digits)
DLIC0016	Add Knox License From Knox cloud services
DLIC0017	Revision Knox License From Knox cloud services
DLIC0018	Delete Knox License From Knox cloud services
DLIC0019	Update License name Knox License From Knox cloud services
DLIC0020	Issue Knox License From Knox cloud services
DLIC0021	KSP License
DLIC0022	Add Knox License From Sales Portal
DLIC0023	Delete License by Retention Policy

Log

Event ID	Event name
CADT0007	Audit Log Transfer to External
CADT0009	Audit Remote Log Server Connection Failure
CADT0016	Delete the audit logs elapsed over the retention period.
CADT0019	Delete Device Log before Retention Date

Profile

Event ID	Event name
CCMD0441	Save Knox Service Plugin App feedback
CPLC0026	The result of applying Agent device policy
CPLC0029	Agent Policy Apply Success on a Device
CPLC0030	Failed to Apply Agent Policy on Device
CPLC0098	Start profile update
CPLC0099	Terminate profile update
CPLC0101	Start registration of Time Trigger when server operates
CPLC0102	Close registration of Time Trigger when server operates
CPLC0103	Start Time Trigger sync
CPLC0104	Close Time Trigger sync
CPLC0152	Google API (Policy Schema)
CPLC0153	Google API (Policy by Organization)
CPLC0154	The result of viewing the Chrome Policy of an organization
CPLC0155	Google API (Inherit Policy)
CPLC0156	Google API (Modify Policy)
CPLC0157	The result of changing the Chrome Policy of an organization
CPLC0158	Google API (Upload Policy File)
CPLC0159	The result of uploading the file from the content provided by the users to set up the Chrome Policy
CPLC0160	Patch Device Group policy (Server → Google)
CPLC0161	Delete Device Group policy (Server → Google)
CPLC0167	Google API (Inherit App Policy)
CPLC0168	Google API (Modify App Policy)
CPLC0169	The Results of Changing the Chrome App Policy of the Organization
CPLC0170	Request of Changing the Chrome App Policy of the Organization
CPRV0001	Eula Download
CPRV0002	Profile Download

Provision

Event ID	Event name
CPRV0004	Request for public key
CPRV0005	Activate provisioning
CPRV0006	Deactivate provisioning
CPRV0008	Activate Knox provisioning
CPRV0168	Provisioning
CPRV0169	Provisioning for AMAPI Client (Companion app)
CPRV0170	Check to prevent reactivation
CPRV0174	Unintended Android Management Type (AE account linking required)
DPRV0001	Request To Changing Device Status To Provisioning Activate Status
DPRV0002	Request To Changing Device Status To Provisioning Deactivate Status
DPRV0004	Activate Work Profile provisioning
DPRV0005	Provisioning for Re-enrolled Device
SCIM0001	SCIM Provisioning request
SCIM0002	SCIM Provisioning response

Setting

Event ID	Event name
CDEV0078	Upload Identity Provider Metadata to server
CCON0155	Reset Syslog Limit

System

Event ID	Event name
CACS0021	Send SMS To User (Async)
CACS0022	Send SMS To Device (Async)
CACS0025	Send SMS To Admin (Async)

User

Event ID	Event name
CAUT0012	User Authentication Failed
CCON0055	User Logged In
CCON0056	User Logged Out
CCON0135	Sign In to Issue an ID Token
CUSR0039	User Checked In to the Shared Device
CUSR0040	User Checked Out from the Shared Device
CUSR0041	Create Shared Device Relation Information
CUSR0042	Delete Shared Device Relation Information
CUSR0043	Sign In to the AMAPI Device
CUSR0044	Assign Staging (Non-Shared) device to the user's device via user login

Volume Purchase Program

Event ID	Event name
CVPP0011	VPP Sync start
CVPP0012	VPP Sync is terminated
CVPP0016	Request from Device for assignment and installation of the VPP Application License
CVPP0017	Assign VPP App License to Device
CVPP0018	Revoke Device's VPP App License
CVPP0019	Update Device's VPP App License

Is this page helpful?