Skip to content

Audit Event List

Use this reference to look up the audit event functions and security event types that are available on the Industrial Edge Device.

The fct value of an audit event is a dot-separated string such as ie.device.software.app.logs.download.

The resource field is optional. It identifies the object of the user action.

fct resource Security Event Type
ie.device.software.app.logs.download <filename> SE_DATA_EXPORTED
ie.device.software.app.start SE_APPLICATION_OPERATION
ie.device.software.app.stop SE_APPLICATION_OPERATION
ie.device.software.app.restart SE_APPLICATION_OPERATION
ie.device.software.app.uninstall SE_APPLICATION_OPERATION
ie.device.software.app.install SE_APPLICATION_OPERATION, SE_SOFTWARE_INTEGRITY_CHECK_FAILED, SE_SOFTWARE_INSTALLED
ie.device.software.app.configuration.update SE_APPLICATION_OPERATION
ie.device.software.app.configuration.delete SE_DELETE_OBJECT
ie.device.software.app.configuration.download <filename> SE_DATA_EXPORTED
ie.device.software.app.auth.login SE_NETWORK_SUCCESSFUL_LOGON, SE_NETWORK_UNSUCCESSFUL_LOGON
ie.device.software.app.auth.logout SE_LOGOFF
ie.device.software.app.securestore.update SE_APPLICATION_OPERATION
ie.device.software.app.securestore.delete SE_APPLICATION_OPERATION
ie.device.software.app.versions.update <versionId> SE_APPLICATION_OPERATION
ie.device.software.app.access SE_OBJECT_OPERATION
ie.device.software.auth.settings.loginattempts SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.reboot SE_DEVICE_STARTUP
ie.device.software.device.shutdown SE_CRITICAL_DEVICE_STOPPED
ie.device.software.device.cert.upload <filename> SE_SECURITY_CONFIGURATION_CHANGED, SE_DATA_IMPORTED
ie.device.software.device.developermode.enable SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.developermode.disable SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.firmware.update SE_FIRMWARE_UPDATE
ie.device.software.device.job.execute SE_OBJECT_OPERATION
ie.device.software.device.job.delete SE_DELETE_OBJECT
ie.device.software.device.logs.download <filename> SE_DATA_EXPORTED
ie.device.software.device.logs.update SE_AUDIT_CFG_CHANGED
ie.device.software.device.ntp.update SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.ports.view SE_OBJECT_OPERATION
ie.device.software.device.proxy.update SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.remoteaccess.enable SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.remoteaccess.disable SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.remoteaccess.update SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.ramlimit.update SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.time.update SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.thresholdlimit.update SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.network.update SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.discovery.reset SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.device.hardreset SE_RESET_TO_FACTORY
ie.device.software.device.softreset SE_RESET_TO_FACTORY, SE_MEMORY_RESET
ie.device.software.device.notification.update SE_OBJECT_OPERATION
ie.device.software.device.resource.view SE_RECONNAISSANCE_DETECTED
ie.device.software.user.profile.update SE_OBJECT_OPERATION
ie.device.software.user.login SE_NETWORK_SUCCESSFUL_LOGON, SE_NETWORK_UNSUCCESSFUL_LOGON
ie.device.software.user.logout SE_LOGOFF
ie.device.software.user.approve SE_ACCOUNT_ENABLED
ie.device.software.user.password.reset SE_ACCESS_PWD_CHANGED
ie.device.software.user.enable SE_ACCOUNT_ENABLED
ie.device.software.user.delete SE_USER_DELETED
ie.device.software.user.signup SE_USER_CREATED
ie.device.software.user.group.create <groupName> SE_USER_GROUP_CREATED
ie.device.software.user.group.delete <groupName> SE_USER_GROUP_DELETED
ie.device.software.user.group.update <groupName> SE_USER_ACCOUNT_ADDED_TO_GROUP, SE_USER_ACCOUNT_DELETED_FROM_GROUP
ie.device.software.user.permission.update SE_SECURITY_CONFIGURATION_CHANGED
ie.device.software.audit.enable SE_AUDIT_CFG_CHANGED
ie.device.software.audit.disable SE_AUDIT_CFG_CHANGED
ie.device.software.audit.configuration.update SE_AUDIT_CFG_CHANGED
ie.device.software.audit.configuration.delete SE_AUDIT_CFG_CHANGED
ie.device.software.audit.logs.download <filename> SE_AUDIT_DATA_SAVED
ie.device.software.state.backup SE_BACKUP_STARTED, SE_BACKUP_FAILED, SE_BACKUP_SUCCESSFULLY_DONE
ie.device.software.state.restore SE_BACKUP_RESTORE_STARTED, SE_BACKUP_RESTORE_FAILED, SE_BACKUP_RESTORE_SUCCESSFULLY_DONE
ie.device.software.metrics.enable SE_AUDIT_CFG_CHANGED
ie.device.software.metrics.disable SE_AUDIT_CFG_CHANGED
ie.device.software.metrics.configuration.create SE_AUDIT_CFG_CHANGED
ie.device.software.metrics.configuration.update SE_AUDIT_CFG_CHANGED
ie.device.software.metrics.configuration.delete SE_AUDIT_CFG_CHANGED
ie.device.software.metrics.configuration.import <filename> SE_DATA_IMPORTED
ie.device.software.metrics.configuration.export <filename> SE_DATA_EXPORTED
ie.device.software.metrics.configuration.check SE_COMMUNICATION_DATA_INTEGRITY_ERROR
ie.device.software.metrics.file.download <filename> SE_DATA_EXPORTED
ie.device.software.resourcemanager.configuration.update SE_CFG_DATA_CHANGED
ie.device.software.resourcemanager.resourcemapping.create SE_CFG_DATA_CHANGED
ie.device.software.resourcemanager.resourcemapping.delete SE_CFG_DATA_CHANGED