To configure DLP Endpoint 11.x event notifications in ePO 5.x, use the following list of Event IDs:
| |
DLP Endpoint 11.x |
| Event ID |
Description |
| 19100 |
Policy Changed (Info) |
| 19101 |
Agent Installed (Info) |
| 19102 |
Agent Enters Bypass Mode (Info) |
| 19103 |
Agent Leaves Bypass Mode (Info) |
| 19104 |
User Logged Into Safe Mode (Info) |
| 19105 |
Evidence Replication Failed (Info) |
| 19106 |
Application File Access Protection (Info) |
| 19107 |
File System Discovery (Info) |
| 19108 |
Email Protection (Info) |
| 19109 |
Network Share Protection (Info) |
| 19110 |
Network Communication Protection (Info) |
| 19111 |
Printing Protection (Info) |
| 19112 |
Removable Storage Protection (Info) |
| 19113 |
Screen Capture Protection (Info) |
| 19114 |
Web Post Protection (Info) |
| 19115 |
Device Plug (Info) |
| 19116 |
N/A |
| 19117 |
New Device Class Found (Info) |
| 19118 |
File Released from Quarantine (Info) |
| 19119 |
DRM Failure (Info) |
| 19120 |
Email Storage Discovery (Info) |
| 19121 |
User has tried to disable Outlook plug-in (Info) |
| 19122 |
Outlook plug-in was added to disabled items (Info) |
| 19123 |
Release Code Locked (Info) |
| 19124 |
Automatic Dump Created (Info) |
| 19125 |
Agent Exceeded Memory Limit on Load (Info) |
| 19126 |
Discovery Summary Report (Info) |
| 19127 |
Clipboard Protection (Info) |
| 19128 |
Policy Applied (Info) |
| 19129 |
Agent Up (Info) |
| 19130 |
Agent Down (Info) |
| 19131 |
Agent Uninstall Key Generated (Info) |
| 19132 |
Agent Quarantine Release Key Generated (Info) |
| 19133 |
Agent Override Key Generated (Info) |
| 19134 |
Cloud Protection (Info) |
| 19135 |
Wrong Driver Version (Info) |
| 19136 |
DLP Endpoint User Sessions (Info) |
| 19170 |
Network Discover File Information (Info) |
| 19171 |
Network Discover Incident (Info) |
