Types of audits

Last updated July 26th, 2023

Understanding audit events

Audit events can be categorized by their point of occurrence and severity.

Occurrence point

Console: Includes the events that occurred in the Admin Portal, such as the administrator’s login, the management of policies and applications, and the connection of integrated systems.
Device: Includes the events that occurred on mobile devices, such as device login, certificate issuance, and the reception of device commands. If the audit log file on a device exceeds the size limit, the file is sent to the server automatically and the audit logs are recorded in a new file.
Server: Includes the request and respond events that occurred on the Knox Manage server when the server and mobile devices communicate. The scheduled tasks on the server are also included.

Severity level

Level	Name	Description
High	Critical	Indicates that the event is a serious error. Your immediate action is required.
	Error	Indicates that the event is a general error. Your action is required but not urgent.
	Warning	Indicates that the event may potentially cause a problem.
	Notice	Indicates that you should be aware of the event.
	Info	Indicates that the event is for general information.
Low	Debug	Indicates that the event is defined in detail for developers.

Audit event classification

The classification of audit events based on the type and event category is as follows. For more information about audit events, see Lists of audit events.

Event Category	Occurrence point
Event Category	Console	Serve	Device
AD/LDAP Sync	O	O
Admin Login	O
Administrators	O
Alerts	O
Android Enterprise	O	O
Applications	O	O
Certificate Status			O
Certificates	O
Compliance		O	O
Connectors	O
Content	O	O
Dashboard	O
Device			O
Device Command	O	O	O
Device Enrollment Program	O	O
Devices	O	O
E-FOTA	O	O
Email	O	O
EMM Agent (Knox Manage agent)			O
EMM Client (Knox Manage Client)			O
Enrollment		O	O
Exception Profile per User		O
Groups	O
Integrations	O
InventoryScheduler		O
Kiosk Launcher			O
License Management		O
Logs	O	O	O
Notices	O
Organization	O
Profile			O
Profiles	O	O	O
Provision		O
SEG Profile	O	O
Service Profiles	O	O
Settings	O
SMS	O	O
System Configuration	O
Time Trigger		O
TxHistory		O
User			O
User Login		O
User Management	O
VPP Management	O	O
Windows	O

Types of audits

Understanding audit events

Occurrence point

Severity level

Audit event classification

On this page