System
The system category contains events that are related to system changes, software installation, or status messages.
The following table describes the low-level event categories and associated severity levels for the system category.
| Low-level event category | Category ID | Description | Severity level (0 - 10) |
|---|---|---|---|
| Unknown System Event | 8001 | Indicates an unknown system event. | 1 |
| System Boot | 8002 | Indicates a system restart. | 1 |
| System Configuration | 8003 | Indicates a change in the system configuration. | 1 |
| System Halt | 8004 | Indicates that the system was halted. | 1 |
| System Failure | 8005 | Indicates a system failure. | 6 |
| System Status | 8006 | Indicates any information event. | 1 |
| System Error | 8007 | Indicates a system error. | 3 |
| Misc System Event | 8008 | Indicates a miscellaneous system event. | 1 |
| Service Started | 8009 | Indicates that system services started. | 1 |
| Service Stopped | 8010 | Indicates that system services stopped. | 1 |
| Service Failure | 8011 | Indicates a system failure. | 6 |
| Successful Registry Modification | 8012 | Indicates that a modification to the registry was successful. | 1 |
| Successful Host-Policy Modification | 8013 | Indicates that a modification to the host policy was successful. | 1 |
| Successful File Modification | 8014 | Indicates that a modification to a file was successful. | 1 |
| Successful Stack Modification | 8015 | Indicates that a modification to the stack was successful. | 1 |
| Successful Application Modification | 8016 | Indicates that a modification to the application was successful. | 1 |
| Successful Configuration Modification | 8017 | Indicates that a modification to the configuration was successful. | 1 |
| Successful Service Modification | 8018 | Indicates that a modification to a service was successful. | 1 |
| Failed Registry Modification | 8019 | Indicates that a modification to the registry failed. | 1 |
| Failed Host-Policy Modification | 8020 | Indicates that a modification to the host policy failed. | 1 |
| Failed File Modification | 8021 | Indicates that a modification to a file failed. | 1 |
| Failed Stack Modification | 8022 | Indicates that a modification to the stack failed. | 1 |
| Failed Application Modification | 8023 | Indicates that a modification to an application failed. | 1 |
| Failed Configuration Modification | 8024 | Indicates that a modification to the configuration failed. | 1 |
| Failed Service Modification | 8025 | Indicates that a modification to the service failed. | 1 |
| Registry Addition | 8026 | Indicates that a new item was added to the registry. | 1 |
| Host-Policy Created | 8027 | Indicates that a new entry was added to the registry. | 1 |
| File Created | 8028 | Indicates that a new was created in the system. | 1 |
| Application Installed | 8029 | Indicates that a new application was installed on the system. | 1 |
| Service Installed | 8030 | Indicates that a new service was installed on the system. | 1 |
| Registry Deletion | 8031 | Indicates that a registry entry was deleted. | 1 |
| Host-Policy Deleted | 8032 | Indicates that a host policy entry was deleted. | 1 |
| File Deleted | 8033 | Indicates that a file was deleted. | 1 |
| Application Uninstalled | 8034 | Indicates that an application was uninstalled. | 1 |
| Service Uninstalled | 8035 | Indicates that a service was uninstalled. | 1 |
| System Informational | 8036 | Indicates system information. | 3 |
| System Action Allow | 8037 | Indicates that an attempted action on the system was authorized. | 3 |
| System Action Deny | 8038 | Indicates that an attempted action on the system was denied. | 4 |
| Cron | 8039 | Indicates a crontab message. | 1 |
| Cron Status | 8040 | Indicates a crontab status message. | 1 |
| Cron Failed | 8041 | Indicates a crontab failure message. | 4 |
| Cron Successful | 8042 | Indicates a crontab success message. | 1 |
| Daemon | 8043 | Indicates a daemon message. | 1 |
| Daemon Status | 8044 | Indicates a daemon status message. | 1 |
| Daemon Failed | 8045 | Indicates a daemon failure message. | 4 |
| Daemon Successful | 8046 | Indicates a daemon success message. | 1 |
| Kernel | 8047 | Indicates a kernel message. | 1 |
| Kernel Status | 8048 | Indicates a kernel status message. | 1 |
| Kernel Failed | 8049 | Indicates a kernel failure message. | |
| Kernel Successful | 8050 | Indicates a kernel successful message. | 1 |
| Authentication | 8051 | Indicates an authentication message. | 1 |
| Information | 8052 | Indicates an informational message. | 2 |
| Notice | 8053 | Indicates a notice message. | 3 |
| Warning | 8054 | Indicates a warning message. | 5 |
| Error | 8055 | Indicates an error message. | 7 |
| Critical | 8056 | Indicates a critical message. | 9 |
| Debug | 8057 | Indicates a debug message. | 1 |
| Messages | 8058 | Indicates a generic message. | 1 |
| Privilege Access | 8059 | Indicates that privilege access was attempted. | 3 |
| Alert | 8060 | Indicates an alert message. | 9 |
| Emergency | 8061 | Indicates an emergency message. | 9 |
| SNMP Status | 8062 | Indicates an SNMP status message. | 1 |
| FTP Status | 8063 | Indicates an FTP status message. | 1 |
| NTP Status | 8064 | Indicates an NTP status message. | 1 |
| Access Point Radio Failure | 8065 | Indicates an access point radio failure. | 3 |
| Encryption Protocol Configuration Mismatch | 8066 | Indicates an encryption protocol configuration mismatch. | 3 |
| Client Device or Authentication Server Misconfigured | 8067 | Indicates that a client device or authentication server was not configured properly. | 5 |
| Hot Standby Enable Failed | 8068 | Indicates a hot standby enable failure. | 5 |
| Hot Standby Disable Failed | 8069 | Indicates a hot standby disable failure. | 5 |
| Hot Standby Enabled Successfully | 8070 | Indicates that hot standby was enabled successfully. | 1 |
| Hot Standby Association Lost | 8071 | Indicates that a hot standby association was lost. | 5 |
| MainMode Initiation Failure | 8072 | Indicates MainMode initiation failure. | 5 |
| MainMode Initiation Succeeded | 8073 | Indicates that the MainMode initiation was successful. | 1 |
| MainMode Status | 8074 | Indicates a MainMode status message was reported. | 1 |
| QuickMode Initiation Failure | 8075 | Indicates that the QuickMode initiation failed. | 5 |
| Quickmode Initiation Succeeded | 8076 | Indicates that the QuickMode initiation was successful. | 1 |
| Quickmode Status | 8077 | Indicates a QuickMode status message was reported. | 1 |
| Invalid License | 8078 | Indicates an invalid license. | 3 |
| License Expired | 8079 | Indicates an expired license. | 3 |
| New License Applied | 8080 | Indicates a new license applied. | 1 |
| License Error | 8081 | Indicates a license error. | 5 |
| License Status | 8082 | Indicates a license status message. | 1 |
| Configuration Error | 8083 | Indicates that a configuration error was detected. | 5 |
| Service Disruption | 8084 | Indicates that a service disruption was detected. | 5 |
| EPS or FPM allocation exceeded | 8085 | Indicates that the license pool allocations for EPS or FPM were exceeded. | 3 |
| Performance Status | 8086 | Indicates that the performance status was reported. | 1 |
| Performance Degradation | 8087 | Indicates that the performance is being degraded. | 4 |
| Misconfiguration | 8088 | Indicates that an incorrect configuration was detected. | 5 |