Epic Hyperspace App User Guide – Parsing and Classification Rules

MPE RuleID	MPE Rule Name	Common Event	Classification
1410515	Epic Hidden Source Code Access Denied	Access Object Failure	Audit/Access Failure
1417113	Break The Glass Attempt Failed	Access Object Failure	Audit/Access Failure
1417114	Break The Glass Failure - Timeout	Access Object Failure	Audit/Access Failure
1417115	Break The Glass Failure - Cancelled BTG Form	Access Object Failure	Audit/Access Failure
1417116	Break The Glass Failure - Failed Authentication	Access Object Failure	Audit/Access Failure
1417118	Break The Glass Inappropriate Attempt	Access Object Failure	Audit/Access Failure
1410485	Archived Record Requested	Object Accessed	Audit/Access Success
1410516	Epic Hidden Source Code Access Granted	Object Accessed	Audit/Access Success
1410526	Pulsar Audit Data Search	Object Accessed	Audit/Access Success
1417108	Masked Data Access	Object Accessed	Audit/Access Success
1417117	Break The Glass Success	Object Accessed	Audit/Access Success
1417111	Fully Unmasked Sensitive Data Printed	Object Downloaded	Audit/Access Success
1417112	Partially Unmasked Sensitive Data Printed	Object Downloaded	Audit/Access Success
1410525	PHI Client File Saved	Object Modified	Audit/Access Success
1417109	Fully Unmasked Sensitive Data Displayed	Object Read	Audit/Access Success
1417110	Partially Unmasked Sensitive Data Displayed	Object Read	Audit/Access Success
1410505	Password Change Messages	Password Modified	Audit/Account Modified
1410506	Administrator Changed User Password	Password Modified	Audit/Account Modified
1410507	User Changed Own Password	Password Modified	Audit/Account Modified
1410503	Failed Canto Login	User Logon Failure	Audit/Authentication Failure
1410509	Failed Haiku Login	User Logon Failure	Audit/Authentication Failure
1410511	Failed Rover Login	User Logon Failure	Audit/Authentication Failure
1410522	Login Failed	User Logon Failure	Audit/Authentication Failure
1410486	Desktop Client Authentication	Authentication Activity	Audit/Authentication Success
1410504	Canto Login	User Logon	Audit/Authentication Success
1410510	Haiku Login	User Logon	Audit/Authentication Success
1410512	Rover Login	User Logon	Audit/Authentication Success
1410521	User Login	User Logon	Audit/Authentication Success
1410524	Web Logon Success	User Logon	Audit/Authentication Success
1410531	Switch User	User Logon	Audit/Authentication Success
1410502	Mobile App Logon	Attempting Login	Audit/Other
1410489	Context Change : Workflow Logging	Audit Message	Audit/Other
1410490	Department Change	Audit Message	Audit/Other
1410491	Provider Change	Audit Message	Audit/Other
1410527	Hyperspace Secure/Unsecure	General Access Control Message	Audit/Other
1410520	Attempted Logon	General Authentication Event	Audit/Other
1410523	Web Logon	General Authentication Event	Audit/Other
1410514	Epic Hidden Source Code Access	Object Access Attempt	Audit/Other
1410508	Failed Password Changed	Failed Password Change Attempt	Audit/Other Audit Failure
1410528	Secure Hyperspace	Workstation Locked	Audit/Other Audit Success
1410529	Unsecure Hyperspace	Workstation Unlocked	Audit/Other Audit Success
1410530	Startup	Process/Service Starting	Audit/Startup and Shutdown
1410519	Event Logging Disabled	Critical Logging Failure	Ops/Critical
1410536	Alert Message	General Alert Message	Ops/Error
1410538	Error Message	General Error	Ops/Error
1410537	Debug Message	General Debug Message	Ops/Information
1410534	Catch All : Level 2	General Information	Ops/Information
1410539	Information Message	General Information	Ops/Information
1410542	Catch All : Level 1	General Information	Ops/Information
1410517	Event Logging Status	General Logging Information	Ops/Information
1410518	Event Logging Enabled	General Logging Information	Ops/Information
1410540	Notice Message	General Notice	Ops/Information
1410541	Warning Message	General Warning	Ops/Warning