Logged events

NOTE  In the current release, only a subset of events are logged. More events will be added in future releases.

On the Event History page, you can track and view details about the following events:

NOTE  Depending on the Absolute product licenses associated with your account, some events may not be applicable.

Event

Data retention period 1

Anti-malware events

  • Device AV product changed
  • Device became AV protected, unprotected

30

Application Persistence events

  • App persistence policy activated, deactivated, changed
365
  • App persistence device became compliant, non-compliant
  • App persistence compliance reason updated
  • App persistence remediated
  • App persistence remediation failed
30

Authentication-related events

  • API Token created, updated, deleted, expired
365
  • User login and logout

90

  • SSO enabled, disabled
  • Two-Factor authentication enabled, disabled, reset
365
  • Session timeout

    NOTE  This event is logged only when a user is redirected to the login page after their session times out. Other timeouts, such as closing the browser without logging out of the Absolute console, are not logged.

30
  • Session max time exceeded

    NOTE  This event is logged if a user session is terminated because it exceeded the maximum duration of 12 hours.

90
  • Service provider accessed
90

Cryptographic wipe events

  • Cryptographic wipe requested, completed, canceled, failed
  • Cryptographic wipe cancellation requested, failed
365

Custom field events

  • Custom field definition created, updated, deleted
  • Custom field updated

365

Device group events

  • Smart device group created, updated, deleted
  • Static device group created, updated, deleted

365

Device hardware events

  • Volume added, updated, removed
  • Device volume nearly full

    NOTE  This event is logged when a volume's available space drops below 10%.

  • Disk added, updated, removed
  • Network adapter added, updated, removed
30
  • Operating system updated
  • System information updated
90
  • Device user information updated
365

Encryption events

  • Device became Encrypted, Unencrypted
  • Device Encryption product changed
365

File Delete events

  • File delete requested, failed
  • File deleted
  • File delete cancellation requested, failed
  • File delete canceled
365

Freeze events

365

Geolocation and geofence events

  • Device location updated
365
  • Geofence created, updated, deleted
  • Device entered a geofence
  • Device exited a geofence
90

Manage Supervisor Password events

  • Supervisor password created, updated, removed
  • Supervisor password creation requested, failed
  • Supervisor password update requested, failed
  • Supervisor password remove requested, failed
365

Reach Script events

  • Script created, updated, deleted
  • Script requested, succeeded, canceled, failed
  • Script cancellation requested, succeeded, failed
  • All pending scripts cancellation requested

365

Refurbishment events

365

Reported missing or stolen events

  • Device reported missing
  • Missing device checked in, found
  • Theft report created, updated
365

Rules events

  • Rule created, updated, deleted
  • Rule triggered
365

Message events

  • End user message requested, completed, failed
  • End user message cancellation requested, failed
  • End user message canceled
  • Message template created, updated, deleted
365

Unenroll events

  • Device unenroll requested, failed
  • Device disabled
365

User management events

  • User created, updated, deleted
  • Role created, updated, deleted
  • Managed role added, removed
365

Other events

365