Audit Events for SOTI MobiControl

Table 1. Deployment Server Events
Requirement Event Name Additional Information
FAU_GEN.1(1).1 Deployment server started
FAU_GEN.1(1).1 Deployment server stopped
FAU_GEN.1(1).1 Deployment server enabled
FAU_GEN.1(1).1 Deployment server disabled
FAU_GEN.1(1).1 Deployment server error
FAU_ALT_EXT.2.1 Updated App Catalog Rule with newer version of application '{0}' (bundle ID: {1}, new version {2})
FAU_ALT_EXT.2.1 Upgrade of App Store License account application data started.
FAU_ALT_EXT.2.1 A newer version of the application '{0}' (bundle ID: {1}, current version {2}) was not found
FAU_ALT_EXT.2.1 A newer version of the application '{0}' (bundle ID: {1}, new version {2}) was found
Cannot get deployment server IP address
Deployment server name not defined
Deployment server not licensed
Error generating device ID
Manager has different time with deployment server
Message queue length (%VALUE%)
Number of worker threads (%VALUE%)
Rule filter failure
Unknown device class name
App Store License Maintenance: All duplicate entries for application have been removed. Only one App Store version of the application remains
App Store License Maintenance: All duplicate entries for application have been removed. Only one Custom App version of the application remains.
App Store License Maintenance: application is used in at least one App Policy as a Custom App, but it is in fact an App Store application. Please change these applications to be App Store applications in all affected App Policies.
App Store License Maintenance: application is used in at least one App Policy as an App Store application, but it is in fact a Custom App. Please change these applications to be Custom Apps in all affected App Policies
Application '{0}' (bundle ID: {1}) cannot be found in the App Store. Please review your App Catalog Rules to ensure they contain valid App Store apps
Application is available in the App Store, but it currently exists in App Policy(s) as a Custom App
Application is no longer available for purchase in the App Store, but it currently exists in App Policy(s) as an App Store Application
Application is not a valid App Store application, but it currently exists in App Policy(s)
Cannot get deployment server IP address
Communication with MobiControl Search service was restored.
Deployment server name not defined
Deployment server not licensed
Error generating device id
Failed to upgrade App Store License account application data. Please manually refresh your App Store License accounts.
Failed to upgrade Custom App information in iOS App Policies. Please manually update your Custom Apps in your App Policies.
Maintenance of iOS MDM profiles completed. Number of devices with client certificates that cannot be found: "{0}". Number of devices with expired client certificates: "{1}". Number of devices with expired profile signing certificates: "{2}". Number of devices requested to update MDM profile: "{3}".
Maintenance of iOS MDM profiles completed. Number of devices with expired client certificates: "{0}". Number of devices with expired profile signing certificates: "{1}". Number of devices requested to update MDM profile: "{2}".
Maintenance of iOS MDM profiles started.
Manager has different time with deployment server
Message queue length (%VALUE%)
Unknown device class name
Number of worker threads (%VALUE%)
Rule "{0}" changed
Rule filter failure
Search for newer version of App Store apps successfully completed
Search for newer version of {0} App Store app(s) started
Successfully upgraded App Store License account application data.
Successfully upgraded Custom App information in iOS App Policies.
The application '{0}' is used as both as an App Store and Custom App. Please correct the use of this application.
Unable to communicate with MobiControl Search service.
Upgrade of Custom App information in iOS App Policies started.
Table 2. System Events
Requirement Event Name Additional Information
FAU_GEN.1(1).1 DS Deleted
FAU_GEN.1(1).1 General system error
FAU_GEN.1(1).1 MS Deleted
FAU_GEN.1(1).1 Database was shrunk
FAU_GEN.1(1).1 Database Maintenance Request Success
FAU_GEN.1(1).1 Database Maintenance Low Storage Log Archive Failed
FAU_GEN.1(1).1 Database Maintenance All Truncate Log Success
FAU_GEN.1(1).1 Scheduled Maintenance All Truncate Log Success
FAU_GEN.1(1).1 Scheduled Maintenance Low Storage Log Archive Failed
FAU_ALT_EXT.2.1 {0} devices assigned to DEP enrollment profile[{1}].
FAU_ALT_EXT.2.1 Devices removed from Device Enrollment Program.
FAU_ALT_EXT.2.1 {0} failed to re-enroll.
FAU_ALT_EXT.2.1 %d device(s) have been unassigned from their DEP Enrollment Profile.
FAU_ALT_EXT.2.1 Apple Device Enrollment Program (DEP) token configured.
FAU_ALT_EXT.2.1 Apple Device Enrollment Program processing failure.
FAU_ALT_EXT.2.1 Device enrolled with Automated Device Enrollment profile
FAU_ALT_EXT.2.1 Device has been unassigned from DEP Enrollment Profile.
FAU_ALT_EXT.2.1 Device Licenses Remaining
FAU_ALT_EXT.2.1 Percentage of Device Licenses Remaining
FAU_ALT_EXT.2.1 App Catalog Rule changed
FAU_ALT_EXT.2.1 App Catalog Rule deactivated
FAU_ALT_EXT.2.1 App Catalog Rule disabled
FAU_ALT_EXT.2.1 App Catalog Rule renamed
FAU_ALT_EXT.2.1 App Policy apps/configurations were changed
FAU_ALT_EXT.2.1 App Policy enterprise ID was changed
FAU_ALT_EXT.2.1 App Store License Maintenance: The App Policy contains an application which is configured to be licensed using App Store License account, but this App Store License account does not have any licenses for this app
FAU_ALT_EXT.2.1 App Store License for application '%s' from account '%s' was revoked from device with Serial Number '%s'
FAU_ALT_EXT.2.1 App Store License was revoked
FAU_ALT_EXT.2.1 App Store License Account Clean Up Started
FAU_ALT_EXT.2.1 AppLocker installation failed ({0})
Delete device requested
Delete User on the device requested.
Device certificate status check failed
Device certificate status checked
Failed to connect to LDAP server. Please ensure Cloud Link Agent working properly if using Cloud Link.
Directory User add failed
Role Add Failed
Catalogue Item delete failed
Role Delete Failed
User Delete Failed
UserGroup Delete Failed
Device Group Permission Edit Failed
Failed to test the APNS configuration due to an unexpected error.
Failed to test the APNS configuration, because a connection to APNS cannot be established.
Failed to test the APNS configuration, because the APNS certificate is expired.
Failed to test the APNS configuration, because the APNS certificate is invalid.
Failed to test the APNS configuration, because the APNS certificate is revoked or invalid.
Failed to update device plugin "{0}" on device. Please consult the Deployment Server logs for more information.
Global Setting - Agent Compatibility update Failed
Global Setting - Agent Compatibility update Successfully
Global Setting - Agent Install Failed
Global Setting - Agent update Failed
Global Setting - Agent Install Successfully
Global Setting - Agent update Successfully
Global Setting - Agent Sync Failed
Directory Service Sync Frequency Update Fail
Directory Service Sync Frequency Update Success
Global Setting - Add Secondary Domain for Google Domain Binding Success
Global Setting - Add Secondary Domain for Google Domain Binding Failed
Global Setting - Delete Secondary Domain for Google Domain Binding Failed
Global Setting - Delete Secondary Domain for Google Domain Binding Success
Global Setting - Add Google Domain Binding Success
Global Setting - Add Google Domain Binding Failed
Global Setting - Delete Google Domain Binding Failed
Global Setting - Delete Google Domain Binding Success
Global Setting - Add Managed Google Domain Binding Success
Global Setting - Delete Managed Google Domain Binding Failed
Global Setting - Delete Managed Google Domain Binding success
Global Setting - Add Managed Google Domain Binding Failed
LDAP Connection Updated Failed
LDAP Connection Added Failed
LDAP Connection Deleted Failed
Archive Deletion Schedule Updated
Archive Folder Updated
Delete Offline Devices Schedule Updated
Permanently Delete Devices After Web Console Deletion Updated
Truncation Logs Request Failed
Truncation Logs Requested
Global Setting - Unenrollment Actions Delete Device Disable Failed
Global Setting - Unenroll Delete Device Enable Failed
Global Setting - Unenrollment Unenroll Delete Device Disabled
Global Setting - Unenrollment Actions Delete Device Enabled
Global Setting - Unenrollment Actions Revoke Certificates Disable Failed
Global Setting - Unenrollment Actions Revoke Certificates Enable Failed
Global Setting - Unenrollment Actions Revoke Certificates Disabled
Global Setting - Unenrollment Actions Revoke Certificates Enabled
Local User couldn't be unlocked as user doesn't exist
Local User deleted successfully.
Local User deletion failed as user couldn't be deleted
Local User deletion failed as user doesn't exist
Local User deletion failed as user has data to sync and ForceDeletion is false or not specified
Local User deletion failed as user is logged in
Local User unlocked successfully.
Log was truncated automatically
Log was truncated manually by the user