Types of audits
Last updated March 31st, 2025
Understanding audit events
Audit events can be categorized by their point of occurrence and severity.
Occurrence point
- Console: Includes the events that occurred in the Admin Portal, such as the administrator’s login, the management of policies and applications, and the connection of integrated systems.
- Device: Includes the events that occurred on mobile devices, such as device login, certificate issuance, and the reception of device commands. If the audit log file on a device exceeds the size limit, the file is sent to the server automatically and the audit logs are recorded in a new file.
- Server: Includes the request and respond events that occurred on the Knox Manage server when the server and mobile devices communicate. The scheduled tasks on the server are also included.
Severity level
|
Level |
Name |
Description |
|---|---|---|
|
High |
Critical |
Indicates that the event is a serious error. Your immediate action is required. |
|
Error |
Indicates that the event is a general error. Your action is required but not urgent. |
|
|
Warning |
Indicates that the event may potentially cause a problem. |
|
|
Notice |
Indicates that you should be aware of the event. |
|
|
Info |
Indicates that the event is for general information. |
|
|
Low |
Debug |
Indicates that the event is defined in detail for developers. |
Audit event classification
The classification of audit events based on the type and event category is as follows. For more information, see Device audit events, Server audit events, and Console audit events.
|
Event Category |
Occurs in |
||
|---|---|---|---|
|
Console |
Server |
Device |
|
|
AD/LDAP Sync |
|||
|
Admin Login |
|||
|
Administrators |
|||
|
Alerts |
|||
|
Android Enterprise |
|||
|
Applications |
|||
|
Certificate Status |
|||
|
Certificates |
|||
|
Compliance |
|||
|
Connectors |
|||
|
Content |
|||
|
Dashboard |
|||
|
Device |
|||
|
Device Command |
|||
|
Device Enrollment Program |
|||
|
Devices |
|||
|
E-FOTA |
|||
|
|
|||
|
EMM Agent (Knox Manage agent) |
|||
|
EMM Client (Knox Manage Client) |
|||
|
Enrollment |
|||
|
Exception Profile per User |
|||
|
Groups |
|||
|
Integrations |
|||
|
InventoryScheduler |
|||
|
Kiosk Launcher |
|||
|
License Management |
|||
|
Logs |
|||
|
Notices |
|||
|
Organization |
|||
|
Profile |
|||
|
Profiles |
|||
|
Provision |
|||
|
SEG Profile |
|||
|
Service Profiles |
|||
|
Settings |
|||
|
SMS |
|||
|
System Configuration |
|||
|
Time Trigger |
|||
|
TxHistory |
|||
|
User |
|||
|
User Login |
|||
|
User Management |
|||
|
VPP Management |
|||
|
Windows |
|||
On this page
Is this page helpful?