The following table contains event (EVT) codes and their corresponding message types.

Event TypeSIEM Event IDCommon Event Name
Intermediate or In-Progress FlowEVT:001Incremental Flow
Normal End of FlowEVT:003End of Flow
Query Rule AlarmEVT:005NetMon User Alarm
Deep Packet Analytics Rule AlarmEVT:010NetMon Lua Alarm
NetMon DiagnosticsEVT:100