Device audit events

The following table contains all audit events concerning devices enrolled with Knox Manage.

Event Category Event Name
Certificate Status
  • Cert Issue Fail (Key Generation Error)
  • Cert Verification Fail (Unknown)
  • BasicConstraints Check Error
  • Path Check Error
  • Valid Date Check Error
  • CRL Check Error
  • Cert Verification Fail (Unknown)
  • Cert Issue Request
  • Cert Issue Success
  • Cert Issue Fail (Parameter Error)
  • Cert Issue Fail (Not-initialized Object Error)
  • Cert Issue Fail (Internal Error)
  • Violated version control policy (Device)
  • Violated recording prevention policy (Device)
  • Check System Forgery
Device Command
  • Keepalive Time Limited
  • Keepalive Notice
  • Device Command Received
  • Verify Device Command
  • Device Command Added
  • Device Command Process Started
  • Device Command Process Finished
  • Failure Installation Package
  • Failure Installation Package in KNOX
  • Failure Uninstallation Package
  • Failure Uninstallation Package in KNOX
  • Device Diagnosis Information
  • Device Lock/Unlock History
  • Failure Installation Package in Work Profile
  • Failure Uninstallation Package in Work Profile
  • Policy violation detected
  • Exit due to policy violation
  • Change Trigger State
  • Change Profile
Device Managed Google Play account revoked (Device)
EMM Agent
  • Device Boot Completed
  • Change Network Connectivity
  • Change Agent Context
  • Initialize Agent
EMM Client
  • EMM Login Failed
  • EMM Client Screen Unlock Failed
  • EMM Login Failed Count Exceeded
  • EMM Client Screen Unlock Failed Count Exceeded
  • Change Screen Lock Password EMM Client
  • Push Registration Succeeded
  • Push Unregistration Succeeded
  • Enroll EMM Agent Started
  • Enroll EMM Agent
  • Unenroll EMM Agent Started
  • Unenroll EMM Agent
  • Enable Device Admin
  • Disable Device Admin
  • Activate ELM License
  • Activate KLMS License
Kiosk Launcher
  • Application installation request (Kiosk)
  • Application list request (Kiosk)
  • Start Audit Logging
  • Send Audit Log To Server
  • Send EMM Agent Log
  • Device Password Attempts Failed Count Exceeded
  • Scheduler Raised
  • KioskMode Result
  • SIM card PIN code change
  • Factory Reset Protection policy configured successfully.
  • Agreed to disable fingerprint lock (Device)