Email content for event notifications

Below are the email contents for each event and a description of the parameters used in the messages:

Code	Event name	Email content
050	Allowed App Registration	Content "(ID) added an allowed app (APP_NAME) with permission (RIGHT) at the path (PATH) on the device (DEVICE_ID)." Parameters ID: The ID of the administrator logged into the client. APP_NAME: The file name of the app registered as an allowed app.ICE_ID: The ID of the device where the allowed app was registered. PATH: The path specified when the allowed app was registered. RIGHT: The permission set during registration (RO, RW, AO, RWV).
051	Allowed App Deletion	Content "(ID) deleted an allowed app (APP_NAME) from the device (DEVICE_ID)." Parameters ID: The ID of the administrator logged into the client. APP_NAME: The file name of the app registered as an allowed app. DEVICE_ID: The ID of the device where the allowed app was registered.
052	Network Drive Mount	Content "(ID) mounted a network drive to the path (MOUNTED_PATH) on the device (DEVICE_ID)." Parameters ID: The ID of the administrator logged into the client. MOUNTED_PATH: The drive letter in Windows or the directory path in Linux. DEVICE_ID: The ID of the device where the client that mounted/unmounted the network drive is installed.
053	Network Drive Unmount	Content "(ID) unmounted the network drive from the path (MOUNTED_PATH) on the device (DEVICE_ID)." Parameters ID: The ID of the administrator logged into the client. MOUNTED_PATH: The drive letter in Windows or the directory path in Linux. DEVICE_ID: The ID of the device where the client that mounted/unmounted the network drive is installed.
054	Server Login (Succeeded)	Content "(ID) logged in to the server from the device (DEVICE_ID)." Parameters ID: The ID of the administrator logged into the client during the mount process. DEVICE_ID: The ID of the device where the client used by the administrator to log in or log out is installed.
055	Server Logout (Succeeded)	Content "(ID) logged out of the server from the device (DEVICE_ID)." Parameters ID: The ID of the administrator logged into the client. DEVICE_ID: The ID of the device where the client used by the administrator to log in or log out is installed.
056	Server Login (Failed)	Content "(ID) was failed to log in to the server from the device (DEVICE_IP)" Parameters ID: The ID of the administrator logged into the client. DEVICE_ID: The ID of the device where the administrator attempted to log in or log out. ERROR_CODE: The error code corresponding to the reason for the login failure. DEVICE_IP: The IP address of the device that failed to log in.
057	Admin 2FA Setup	Content "(ID) enabled their 2FA method." Parameters ID: The account that activated the two-factor authentication method.
058	Server Access (Block)	Content "(ID) attempted to access the server from an unregistered device (DEVICE_IP)." Parameters ID: The ID of the administrator who attempted to access the client. DEVICE_IP: The IP address of the device from which the access attempt was made.
101	Admin Console Login	Content "(ID) logged in to Admin Console from (IP_ADDRESS)." Parameters ID: The ID of the administrator logged into the admin console. IP_ADDRESS: The IP address of the device (e.g., computer, smartphone) used to access the admin console via a web browser.
102	Admin Console Logout	Content "(ID) logged out of Admin Console from (IP_ADDRESS)." Parameters ID: The ID of the administrator logged into the admin console. IP_ADDRESS: The IP address of the device (e.g., computer, smartphone) used to access the admin console via a web browser.
103	Admin Console Session Termination	Content "The Admin Console session of (ID) at (IP_ADDRESS) was terminated." Parameters ID: The ID of the administrator logged into the admin console. IP_ADDRESS: The IP address of the device (e.g., computer, smartphone) used to access the admin console via a web browser.
104	Admin Console Session Force Termination	Content "Since (ID_A) logged in, the Admin Console session of (ID_B) at (IP_ADDRESS) was terminated." Parameters ID_A: The ID of the administrator who logged into the admin console most recently. ID_B: The ID of the administrator who was already logged into the admin console. IP_ADDRESS: The IP address of the device (e.g., computer, smartphone) used to access the admin console via a web browser.
105	Admin Console Login Attempt	Content "(ID) was failed to log in to Admin Console from (IP_ADDRESS)." Parameters ID: The ID of the administrator logged into the admin console. IP_ADDRESS: The IP address of the device (e.g., computer, smartphone) used to access the admin console via a web browser.
106	Admin Console Account Lock (Consecutive Failed Login Attempts)	Content "(ID) was locked due to consecutive failed login attempts to Admin Console from (IP_ADDRESS)." Parameters ID: The ID of the administrator logged into the admin console. IP_ADDRESS: The IP address of the device (e.g., computer, smartphone) used to access the admin console via a web browser.
107	Account Unlock	Content "(ID_A) unlocked (ID_B) (Type: Type_C)." Parameters ID_A: The account that performed the unlock action. ID_B: The account of the administrator whose lock was released. Type_C: The type of system where the lock was released (device/web).
108	Admin Creation	Content "(ID_A) added (ID_B)." (ID, Name, Role, Allowed IP address 1, Allowed IP address 2) Parameters ID_A: The account that added the new account. ID_B: The newly added account. ID, Name, Role, Allowed IP Address 1, Allowed IP Address 2: Information about the newly added account.
109	Admin Update	Content "(ID_A) updated (ID_B)." (ID, Name, Role, Allowed IP address 1, Allowed IP address 2) Parameters ID_A: The account that performed the account information update. ID_B: The account whose information was updated. ID, Name, Role, Allowed IP Address 1, Allowed IP Address 2: The updated information of the account.
110	Admin 2FA Reset	Content "(ID_A) reset (ID_B)'s 2FA method." Parameters ID_A: The account that performed the two-factor authentication reset. ID_B: The account whose two-factor authentication method was reset.
111	Admin Deletion	Content "(ID_A) deleted (ID_B)." Parameters ID_A: The account that performed the account deletion. ID_B: The account that was deleted.
112	Device Registration	Content "(ID) added a device (DEVICE_ID)." (Device ID, Device name, MAC address, IP address, Description) Parameters ID: The account that added the device. DEVICE_ID: The ID of the newly added device. Device ID, Device name, MAC address, IP address, Description: Information about the newly added device.
113	Device Information Update	Content "(ID) updated the device (DEVICE_ID)." (Device ID, Device name, MAC address, IP address, Description) Parameters ID: The account that updated the device information.정 DEVICE_ID: The ID of the device whose information was updated. Device ID, Device name, MAC address, IP address, Description: The updated information of the device.
114	Device Deletion	Content "(ID) deleted the device (DEVICE_ID)." Parameters ID: The account that deleted the device. DEVICE_ID: The ID of the deleted device.
115	Admin Password Change	Content "(ID) changed the password for (ID2)." Parameters ID: The account that directly changed the password. ID2: The account whose password was changed.
117	Admin 2FA Setup	Content "(ID) enabled their 2FA method." Parameters ID: The account that activated the two-factor authentication method.
118	Device Admin Addition	Content "(ID) added the admins of the device (DEVICE_ID)." (Device admin IDs) Parameters ID: The account that added the manager to the device. DEVICE_ID: The ID of the device to which the manager was added. Device admin IDs: The list of manager accounts added to the device.
119	Device Admin Deletion	Content "(ID) deleted the admins of the device (DEVICE_ID)." (Device admin IDs) Parameters ID: The account that removed the manager from the device. DEVICE_ID: The ID of the device from which the manager was removed. Device admin IDs: The list of manager accounts added to the device.
120	Client Package Uploaded	Content "(ID) uploaded the client package of (DEVICE_TYPE) version (VERSION)." (Released status: STATUS) Parameters ID: The account that uploaded the client package. DEVICE_TYPE: The type of client (Windows Client/Linux Client). VERSION: The version of the uploaded package. STATUS: The distribution status (Deployed/Pending).
121	Client Package Downloaded	Content "(ID) downloaded the client package of (DEVICE_TYPE) version (VERSION)." Parameters ID: The account that downloaded the client package. DEVICE_TYPE: The type of client (Windows Client/Linux Client). VERSION: The version of the downloaded package.
122	Client Package Changed	Content "(ID) changed the client package of (DEVICE_TYPE) version (VERSION)." (Released status: STATUS) Parameters ID: The account that modified the client package information. DEVICE_TYPE: The type of client (Windows Client/Linux Client). VERSION: The version of the package whose information was modified. STATUS: The distribution status (Deployed/Pending).
123	Client Package Removed	Content "(ID) removed the client package of (DEVICE_TYPE) version (VERSION)." Parameters ID: The account that deleted the client package information. DEVICE_TYPE: The type of client (Windows Client/Linux Client). VERSION: The version of the package whose information was deleted.
130	License Key Changed	Content "(ID) changed the license key." Parameters ID: The account that changed the license key.
131	License Key Synced	Content "(ID) synced the license key." Parameters ID: The account that changed the license key.
132	License Key Expired	Content "The license key expired." Parameters None
133	Admin Console Attempt Failed (Invalid Source IP Address)	Content "An unauthorized system (IP) attempted to access the Admin Console." Parameters IP: The IP address of the system that attempted to access the admin web.
134	Account Unlock (Timeout)	Content "The account lockout (TIME_A) has been lifted as the account (ID_B) lock duration has elapsed." Parameters TIME_A: The account that deleted the client package information. ID_B: The type of client (Windows Client/Linux Client).
142	Attempted Access from an Unregistered IP Address (Administrator Web UI)	Content "An unregistered device (IP) attempted to log in to the administrator web UI. (ID)" Parameters ID: The ID entered during the login attempt to the admin web UI. IP: The IP address of the system where the login attempt failed.
143	Cancel Duplicate Login (Administrator Web UI)	Content "(ID) attempted a duplicate login on the administrator web UI but canceled (IP)." Parameters ID: The ID entered during the login attempt to the admin web UI. IP: The IP address of the system where the duplicate login was canceled.
144	Reuse of Authentication Information (Administrator Web UI)	Content "(ID) attempted to reuse authentication information of the Administrator Web on (IP)." Parameters ID: The ID used during the reuse of authentication information. IP: The IP address of the device that attempted to reuse authentication information.
152	Server Process Startup	Content "The server process started." Parameters None
153	Email Notification (Succeeded)	Content "An email notification was sent successfully." (Event code: EVENT_CODE) Parameters EVENT_CODE: The code assigned to each event.
165	Account Unlock (Timeout)	Content “(ID_B)'s account has been unlocked because the account lock holding time (TIME_A) has elapsed.” Parameters TIME_A: The currently configured account lock duration. ID_B: The account of the administrator whose lock was released.
169	Server Process Shutdown	Content "The server process stopped." Parameters None
170	Client Account Lock (Consecutive Failed Login Attempts)	Content "(ID) was locked due to consecutive failed login attempts to the device (DEVICE_IP)." Parameters ID: The ID of the administrator who logged into the device. DEVICE_IP: The IP address of the device used to log in (source IP address used to connect to the server).
201	File Access by Unauthorized App	Content "An unauthorized application(APP_NAME) tried to access (FILE_NAME) on the device (DEVICE_ID)." (Device admin ID: ID) Parameters APP_NAME: The name of the executable file of the app that attempted to access the file. FILE_NAME: The name of the file that was attempted to be accessed. DEVICE_ID: The ID of the device where the event occurred. ID: The administrator account logged into the device where the event occurred.
303	Audit Log Space Threshold Excess (minor)	Content "The audit log space 'Minor' threshold(THRESHOLD) was exceeded." Parameters THRESHOLD : minor treshold
304	Audit Log Space Threshold Excess (major)	Content "The audit log space 'Major' threshold(THRESHOLD) was exceeded." Parameters THRESHOLD : major treshold
305	Audit Log Space Maximum Threshold Excess	Content "The audit log space 'Critical' threshold was exceeded. (COUNT) record(s) of the audit log was deleted in order of age due to the new record(s)." Parameters COUNT: The number of audit log records that were deleted.
306	Email Notification (Failed)	Content "The email notification was failed to be sent." (Error code: ERROR_CODE) Parameters ERROR_CODE: The code corresponding to the reason for the email delivery failure.
309	Server Disk Usage (Full)	Content "The server is out of storage space" Parameters None
310	Attempted Access from an Unregistered IP Address (Client)	Content "An unregistered device(DEVICE_IP) attempted to log in to the server.(ID)" Parameters ID: The ID used during the client login attempt. DEVICE_IP: The IP address of the system where the login attempt failed.
312	Server Disk Usage (Available)	Content "The disk usage on the server is available." Parameters None
510	Client Package Update	Content The update client package for device (DEVICE_ID) has completed." (Result: STATUS) Parameters DEVICE_ID: The ID of the device where the client is installed. STATUS: The result of the client program update (Success/Fail).
511	Reuse of Authentication Information (Client)	Content "The reuse authentication information of Client were reused from (DEVICE_IP)." Parameters DEVICE_IP: The IP address of the system where the login attempt failed.

Articles in this section