System Event Monitor Messages for the Cloud Authentication ServiceSystem Event Monitor Messages for the Cloud Authentication Service
System events trigger the following messages to appear in the System Event Monitor. New system events have been added and descriptions for some of the events have been modified. If these descriptions are used for SIEM integrations, they must be modified accordingly.
Event Code | Level | Type | Category | Description |
---|---|---|---|---|
683 | notice | system | My Authenticators | Authenticator profile update succeeded. |
684 | error | system | My Authenticators | Authenticator profile update failed. |
2501 | notice | system | Identity Source Sync | User's email changed. |
2502 | notice | system | Identity Source Sync | Users re-enabled in the Cloud Authentication Service due to changes in the directory server or cloud identity source configuration. (n) users enabled. Users affected include: (users' email addresses). |
2503 | notice | system | Identity Source Sync | Users disabled in the Cloud Authentication Service due to changed directory server status. (n) users disabled. Users affected include: (users' email addresses). |
2504 | notice | system | Identity Source Sync | Users disabled in the Cloud Authentication Service – Not found in identity source. (n) users disabled. Users affected include: (users' email addresses). |
2505 | notice | system | Identity Source Sync | Identity source synchronization completed successfully. |
2506 | notice | system | Identity Source Sync | Identity source synchronization canceled. |
2507 | error | system | Identity Source Sync | Identity source synchronization not completed successfully. |
2508 | notice | system | Identity Source Sync | Users are missing one or more unique identifiers. Check the user attribute configurations in both the cloud identity source and the directory server. |
2510 | notice | system | User Management | User removed from Cloud Authentication Service. |
2512 | notice | system | Hardware Authenticator | RSA SID700 Hardware Authenticators imported successfully. |
2513 | error | system | Hardware Authenticator | RSA SID700 Hardware Authenticator import failed – Timeout error. |
2514 | error | system | Hardware Authenticator | RSA SID700 Hardware Authenticator import failed – Unknown error. |
2515 | notice | system | Hardware Authenticator | Deleted expired RSA SID700 Hardware Authenticators. |
2516 | notice | system | Hardware Authenticator | RSA SID700 Hardware Authenticator import failed. |
3023 | error | system | My Authenticators | Authenticator profile update failed. |
20001 | notice | system | Authentication | Authentication method unlocked - Lockout duration expired. |
20110 | notice | system | Identity Router | Identity router connected to Cloud Authentication Service. |
20111 | error | system | Identity Router | Identity router disconnected from the Cloud Authentication Service. |
20121 | notice | system | Identity Router | Identity router registration with Cloud Authentication Service succeeded. |
20122 | error | system | Identity Router | Identity router registration with Cloud Authentication Service failed - Invalid activation code. |
20123 | error, | system | Identity Router | Identity router registration with Cloud Authentication Service failed - Internal system error. |
20130 | notice | system | Identity Router | Cloud Authentication Service successfully pushed Authentication Manager configuration to identity router. |
20131 | error | system | Identity Router | Cloud Authentication Service failed to push Authentication Manager configuration to an identity router - Service to push the configuration not found. |
20132 | error | system | Identity Router | Cloud Authentication Service failed to push Authentication Manager configuration to an identity router - Cannot connect to an identity router. |
20133 | error | system | Identity Router | Cloud Authentication Service failed to push Authentication Manager configuration to an identity router - Identity router cannot save configuration. |
20140 | notice | system | Identity Router | Identity router successfully retrieved most recent Authentication Manager configuration on startup. |
20141 | error | system | Identity Router | Identity router cannot retrieve most recent Authentication Manager configuration - Identity router cannot save configuration. |
20142 | error | system | Identity Router | Identity router cannot retrieve most recent Authentication Manager configuration from the database. |
20143 | error | system | Identity Router | Identity router cannot retrieve most recent Authentication Manager configuration – Cloud Authentication Service not found. |
20144 | error | system | Identity Router | Identity router cannot retrieve most recent Authentication Manager configuration - Cannot connect to the Cloud Authentication Service. |
20150 | notice | system | Identity Router | Identity router successfully connected to Authentication Manager. |
20152 | error | system | Identity Router | Identity router cannot initiate contact with the Authentication Manager server. |
20153 | error | system | Identity Router | Identity router cannot connect to Authentication Manager - Cannot reach the configured Authentication Manager host address. |
20154 | error | system | Identity Router | Identity router cannot connect to Authentication Manager - Configured agent name is not defined in the Authentication Manager deployment. |
20155 | error | system | Identity Router | Identity router cannot connect to Authentication Manager - Unknown error. |
20161 | error | system | Identity Router | The identity router cannot connect to any configured identity sources. |
20162 | error | system | Identity Router | The identity router cannot connect to some configured identity sources. |
20163 | notice | system | Identity Router | The identity router can connect to all configured identity sources. |
20164 | notice | system | Identity Router | All configured DNS servers are working properly. |
20165 | error | system | Identity Router | Some of the configured DNS servers are not working properly. |
20166 | error | system | Identity Router | None of the configured DNS servers are working properly. |
20167 | notice | system | Identity Router | The identity router can connect to the configured Authentication Manager server. |
20168 | error | system | Identity Router | The identity router cannot connect to the configured Authentication Manager server. |
20169 | notice | system | Identity Router | The identity router can connect to the system update repositories. |
20170 | error | system | Identity Router | The identity router cannot connect to the system update repositories. |
20171 | notice | system | Identity Router | The identity router can connect to the adapter update repositories. |
20172 | error | system | Identity Router | The identity router cannot connect to the adapter update repositories. |
20173 | notice | system | Identity Router | The identity router can synchronize time with the configured NTP server. |
20174 | error | system | Identity Router | The identity router cannot synchronize time with the configured NTP server. |
20175 | notice | system | Identity Router | The identity router software update was successful. |
20176 | error | system | Identity Router | The identity router software update failed. |
20177 | notice | system | Identity Router | The identity router software update is in progress. |
20178 | notice | system | Identity Router | The identity router adapter update was successful. |
20179 | error | system | Identity Router | The identity router adapter update failed. |
20180 | notice | system | Identity Router | The identity router adapter update is in progress. |
20181 | notice | system | Identity Router | The identity router time is within 60 seconds of the time reported by the Cloud Authentication Service. |
20182 | error | system | Identity Router | The identity router time is not within 60 seconds of the time reported by the Cloud Authentication Service. |
20183 | notice | system | Identity Router | Identity router CPU usage is within the threshold limit. |
20184 | error | system | Identity Router | Identity router CPU usage exceeds the threshold limit. |
20185 | notice | system | Identity Router | Cluster is online and in quorum with all configured identity routers online. |
20186 | error | system | Identity Router | Cluster is not in quorum but at least one configured identity router is online. |
20187 | error | system | Identity Router | Cluster is offline and not in quorum. No configured identity routers are online. |
20188 | notice | system | Identity Router | Identity router memory usage is within the threshold limit. |
20189 | error | system | Identity Router | Identity router memory usage exceeds the threshold limit. |
20190 | notice | system | Identity Router |
Identity router can connect successfully to the current and all alternate Cloud Authentication Service IP addresses. |
20191 | error | system | Identity Router |
Identity router cannot connect to either the current or some of the alternate Cloud Authentication Service IPs addresses. |
22000 | notice | system | User Report | User report request received. |
22001 | notice | system | User Report | User report request canceled. |
24009 | notice | system | My Page | My Page is enabled. |
27000 | notice | system | AM OTP credential Seed Sync | OTP credential Seed Sync Client Public Key is updated. |
27001 | notice | system | Authenticate OTP credential Sync | Authentication Manager retrieved Authenticate OTP records from Cloud Authentication Service. |
27051 | notice | system | Hardware Authenticator Sync | Authentication Manager retrieved Hardware Authenticator records from Cloud Authentication Service. |
27052 | notice | system | Hardware Authenticator Transfer | Authentication Manager canceled Hardware Authenticator transfer to Cloud Authentication Service. |
27053 | notice | system | Hardware Authenticator Transfer | Authentication Manager successfully transferred Hardware Authenticators to Cloud Authentication Service. |
27054 | notice | system | Hardware Authenticator Transfer | Authentication Manager unable to transfer all Hardware Authenticators to Cloud Authentication Service – Timeout. |
27055 | notice | system | Hardware Authenticator Transfer | Authentication Manager unable to cancel Hardware Authenticator transfer to Cloud Authentication Service – Timeout. |
27500 | notice | system | AM Integration | Authentication Manager public key(s) updated. |
28000 | notice | system | Authentication | Successful custom app registration. |