Menu

Types of audits

Understanding audit events

Audit events can be categorized by their point of occurrence and severity.

Occurrence point

  • Console: Includes the events that occurred in the Admin Portal, such as the administrator’s login, the management of policies and applications, and the connection of integrated systems.
  • Device: Includes the events that occurred on mobile devices, such as device login, certificate issuance, and the reception of device commands. If the audit log file on a device exceeds the size limit, the file is sent to the server automatically and the audit logs are recorded in a new file.
  • Server: Includes the request and respond events that occurred on the Knox Manage server when the server and mobile devices communicate. The scheduled tasks on the server are also included.

Severity level

Level

Name

Description

High

Critical

Indicates that the event is a serious error. Your immediate action is required.

 

Error

Indicates that the event is a general error. Your action is required but not urgent.

 

Warning

Indicates that the event may potentially cause a problem.

 

Notice

Indicates that you should be aware of the event.

 

Info

Indicates that the event is for general information.

Low

Debug

Indicates that the event is defined in detail for developers.

Audit event classification

The classification of audit events based on the type and event category is as follows. For more information about audit events, see Lists of audit events.

Event Category

Occurrence point

Console

Server

Device

AD/LDAP Sync

O

O

 

Admin Login

O

 

 

Administrators

O

 

 

Alerts

O

 

 

Android Enterprise

O

O

 

Applications

O

O

 

Certificate Status

 

 

O

Certificates

O

 

 

Compliance

 

O

O

Connectors

O

 

 

Content

O

O

 

Dashboard

O

 

 

Device

 

 

O

Device Command

O

O

O

Device Enrollment Program

O

O

 

Devices

O

O

 

E-FOTA

O

O

 

Email

O

O

 

EMM Agent (Knox Manage agent)

 

 

O

EMM Client (Knox Manage Client)

 

 

O

Enrollment

 

O

O

Exception Profile per User

 

O

 

Groups

O

 

 

Integrations

O

 

 

InventoryScheduler

 

O

 

Kiosk Launcher

 

 

O

License Management

 

O

 

Logs

O

O

O

Notices

O

 

 

Organization

O

 

 

Profile

 

 

O

Profiles

O

O

O

Provision

 

O

 

SEG Profile

O

O

 

Service Profiles

O

O

 

Settings

O

 

 

SMS

O

O

 

System Configuration

O

 

 

Time Trigger

 

O

 

TxHistory

 

O

 

User

 

 

O

User Login

 

O

 

User Management

O

 

 

VPP Management

O

O

 

Windows

O

 

 

Share it: