|
MPE RuleID |
MPE Rule Name |
Common Event |
Classification |
|---|---|---|---|
|
1410515 |
Epic Hidden Source Code Access Denied |
Access Object Failure |
Audit/Access Failure |
|
1417113 |
Break The Glass Attempt Failed |
Access Object Failure |
Audit/Access Failure |
|
1417114 |
Break The Glass Failure - Timeout |
Access Object Failure |
Audit/Access Failure |
|
1417115 |
Break The Glass Failure - Cancelled BTG Form |
Access Object Failure |
Audit/Access Failure |
|
1417116 |
Break The Glass Failure - Failed Authentication |
Access Object Failure |
Audit/Access Failure |
|
1417118 |
Break The Glass Inappropriate Attempt |
Access Object Failure |
Audit/Access Failure |
|
1410485 |
Archived Record Requested |
Object Accessed |
Audit/Access Success |
|
1410516 |
Epic Hidden Source Code Access Granted |
Object Accessed |
Audit/Access Success |
|
1410526 |
Pulsar Audit Data Search |
Object Accessed |
Audit/Access Success |
|
1417108 |
Masked Data Access |
Object Accessed |
Audit/Access Success |
|
1417117 |
Break The Glass Success |
Object Accessed |
Audit/Access Success |
|
1417111 |
Fully Unmasked Sensitive Data Printed |
Object Downloaded |
Audit/Access Success |
|
1417112 |
Partially Unmasked Sensitive Data Printed |
Object Downloaded |
Audit/Access Success |
|
1410525 |
PHI Client File Saved |
Object Modified |
Audit/Access Success |
|
1417109 |
Fully Unmasked Sensitive Data Displayed |
Object Read |
Audit/Access Success |
|
1417110 |
Partially Unmasked Sensitive Data Displayed |
Object Read |
Audit/Access Success |
|
1410505 |
Password Change Messages |
Password Modified |
Audit/Account Modified |
|
1410506 |
Administrator Changed User Password |
Password Modified |
Audit/Account Modified |
|
1410507 |
User Changed Own Password |
Password Modified |
Audit/Account Modified |
|
1410503 |
Failed Canto Login |
User Logon Failure |
Audit/Authentication Failure |
|
1410509 |
Failed Haiku Login |
User Logon Failure |
Audit/Authentication Failure |
|
1410511 |
Failed Rover Login |
User Logon Failure |
Audit/Authentication Failure |
|
1410522 |
Login Failed |
User Logon Failure |
Audit/Authentication Failure |
|
1410486 |
Desktop Client Authentication |
Authentication Activity |
Audit/Authentication Success |
|
1410504 |
Canto Login |
User Logon |
Audit/Authentication Success |
|
1410510 |
Haiku Login |
User Logon |
Audit/Authentication Success |
|
1410512 |
Rover Login |
User Logon |
Audit/Authentication Success |
|
1410521 |
User Login |
User Logon |
Audit/Authentication Success |
|
1410524 |
Web Logon Success |
User Logon |
Audit/Authentication Success |
|
1410531 |
Switch User |
User Logon |
Audit/Authentication Success |
|
1410502 |
Mobile App Logon |
Attempting Login |
Audit/Other |
|
1410489 |
Context Change : Workflow Logging |
Audit Message |
Audit/Other |
|
1410490 |
Department Change |
Audit Message |
Audit/Other |
|
1410491 |
Provider Change |
Audit Message |
Audit/Other |
|
1410527 |
Hyperspace Secure/Unsecure |
General Access Control Message |
Audit/Other |
|
1410520 |
Attempted Logon |
General Authentication Event |
Audit/Other |
|
1410523 |
Web Logon |
General Authentication Event |
Audit/Other |
|
1410514 |
Epic Hidden Source Code Access |
Object Access Attempt |
Audit/Other |
|
1410508 |
Failed Password Changed |
Failed Password Change Attempt |
Audit/Other Audit Failure |
|
1410528 |
Secure Hyperspace |
Workstation Locked |
Audit/Other Audit Success |
|
1410529 |
Unsecure Hyperspace |
Workstation Unlocked |
Audit/Other Audit Success |
|
1410530 |
Startup |
Process/Service Starting |
Audit/Startup and Shutdown |
|
1410519 |
Event Logging Disabled |
Critical Logging Failure |
Ops/Critical |
|
1410536 |
Alert Message |
General Alert Message |
Ops/Error |
|
1410538 |
Error Message |
General Error |
Ops/Error |
|
1410537 |
Debug Message |
General Debug Message |
Ops/Information |
|
1410534 |
Catch All : Level 2 |
General Information |
Ops/Information |
|
1410539 |
Information Message |
General Information |
Ops/Information |
|
1410542 |
Catch All : Level 1 |
General Information |
Ops/Information |
|
1410517 |
Event Logging Status |
General Logging Information |
Ops/Information |
|
1410518 |
Event Logging Enabled |
General Logging Information |
Ops/Information |
|
1410540 |
Notice Message |
General Notice |
Ops/Information |
|
1410541 |
Warning Message |
General Warning |
Ops/Warning |