General Audit Event Types
This section provides information about General Audit Events. Audit events are sent to the SIEM system and may occasionally require further analysis and parsing within those systems. The following information may be useful when setting up such actions.
| Event Id | Action | Log type |
|---|---|---|
| 0 | Other | Unspecified |
| 1 | Logon | Logon |
| 3 | PasswordReset | Logon |
| 3 | PasswordReset | FileTransfers |
| 22 | UserUpdateRole | Users |
| 23 | UserDelete | Users |
| 26 | UserDisable | Users |
| 27 | UserEnable | Users |
| 28 | UserUpdate | Users |
| 29 | GuestEmailAdded | Users |
| 30 | GuestEmailChanged | Users |
| 31 | GuestEmailRemoved | Users |
| 33 | FileDownload | FileTransfers |
| 34 | FileUpload | FileTransfers |
| 35 | FileDeleted | FileTransfers |
| 36 | FileTrashed | FileTransfers |
| 37 | FileRenamed | FileTransfers |
| 38 | FilePreviewed | FileTransfers |
| 39 | FileRestored | FileTransfers |
| 40 | FileBlocked | MalwareScanning |
| 41 | FileBlockedNotification | MalwareScanning |
| 42 | MalwareDeleted | MalwareScanning |
| 43 | MalwareScanErrorSent | MalwareScanning |
| 44 | FilePurged | FileTransfers |
| 45 | FileSanitized | MalwareScanning |
| 46 | FileDlpProcessed | MalwareScanning |
| 47 | FileArchived | FileTransfers |
| 61 | ActiveDirectorySyncStart | ActiveDirectory |
| 62 | ActiveDirectorySyncStop | ActiveDirectory |
| 64 | AddTemplateVersion | Settings |
| 65 | ResetTemplate | Settings |
| 66 | ActivateTemplate | Settings |
| 67 | ExportTemplate | Settings |
| 70 | AddLicense | Settings |
| 71 | RemoveLicense | Settings |
| 72 | UpdateUrl | Settings |
| 75 | CreateStorage | Settings |
| 76 | DeleteStorage | Settings |
| 77 | UpdateStorage | Settings |
| 80 | ChangeLogLevel | Settings |
| 90 | TransferSettings | Settings |
| 100 | CoreSettings | Settings |
| 110 | TokenCreated | Tokens |
| 111 | TokenDeleted | Tokens |
| 112 | TokenModified | Tokens |
| 120 | SmtpUpdated | Settings |
| 130 | OutbreakPrevention | Settings |
| 140 | FileRescan | FileTransfers |
| 150 | FileUnlock | FileTransfers |
| 170 | FileApproved | FileTransfers |
| 171 | ScanFailureOverride | FileTransfers |
| 172 | FileReleased | FileTransfers |
| 175 | FileApprovalRevoked | FileTransfers |
| 176 | FileShared | FileTransfers |
| 177 | FileShareFailed | FileTransfers |
| 178 | FileUnshared | FileTransfers |
| 180 | SupervisorApproval | Settings |
| 181 | SupervisorDelegate | Users |
| 182 | SupervisorGlobalVoteReset | Settings |
| 183 | SupervisorInvalidFilterRemoved | Settings |
| 184 | SupervisorGlobalFilterRemoved | Settings |
| 190 | ImportSettings | Settings |
| 191 | ExportSettings | Settings |
| 201 | TokenRetention | Retention |
| 210 | ThemeConfiguration | Settings |
| 250 | RadiusServerConfiguration | Settings |
| 251 | RadiusServerAdded | Settings |
| 252 | RadiusServerDeleted | Settings |
| 300 | ActiveDirectoryServerAdded | ActiveDirectory |
| 301 | ActiveDirectoryServerDeleted | ActiveDirectory |
| 302 | ActiveDirectorySyncEnabled | ActiveDirectory |
| 303 | ActiveDirectorySyncDisabled | ActiveDirectory |
| 304 | ActiveDirectoryAccountSettingsUpdated | ActiveDirectory |
| 305 | ActiveDirectorySynchronizationSettingsUpdated | ActiveDirectory |
| 306 | ActiveDirectoryFailedLoginAttemptsSettingsUpdated | ActiveDirectory |
| 307 | ActiveDirectoryUserFilteringSettingsUpdated | ActiveDirectory |
| 400 | OrganizationalUnitEnable | OrganizationalUnits |
| 401 | OrganizationalUnitDisable | OrganizationalUnits |
| 402 | OrganizationalUnitUpdateParent | OrganizationalUnits |
| 500 | FolderCreated | Folders |
| 501 | FolderMoved | Folders |
| 502 | FolderDeleted | Folders |
| 503 | FolderShareUpdated | Folders |
| 503 | FolderShareUpdated | FileTransfers |
| 504 | FolderRenamed | Folders |
| 600 | AdGroupDisable | ActiveDirectoryGroups |
| 601 | AdGroupEnable | ActiveDirectoryGroups |
| 602 | AdGroupUpdate | ActiveDirectoryGroups |
| 700 | EncryptionKeyGenerated | Settings |
| 701 | EncryptionKeyDeleted | Settings |
| 800 | FileSupervisorComment | FileTransfers |
| 801 | FileOwnerComment | FileTransfers |
| 900 | RecycleBinEmpty | RecycleBin |
| 901 | RecycleBinSettings | RecycleBin |
| 950 | DatabaseCredentials | Settings |
| 1000 | SsoSettings | Settings |
| 1010 | VaultToVaultSettings | Settings |
| 1020 | GuestWelcomeNotification | Notification |
| 1030 | SecuritySettings | Settings |
| 1040 | NetworkRuleCreated | NetworkSecurity |
| 1041 | NetworkRuleUpdated | NetworkSecurity |
| 1042 | NetworkRuleDeleted | NetworkSecurity |
Was this page helpful?
