يوضح الجدول أدناه أنواع أحداث خادم إدارة Kaspersky Security Center التي تندرج ضمن مستوى أهمية حرج.
لكل حدث يمكن إنشاؤه بواسطة أحد التطبيقات، يمكنك تحديد إعدادات الإخطار وإعدادات التخزين في علامة التبويب Event configuration في سياسة التطبيق. بالنسبة لخادم الإدارة، يمكنك أيضًا عرض قائمة الأحداث وتكوينها في خصائص خادم الإدارة. إذا كنت ترغب في تكوين إعدادات الإخطار لجميع الأحداث مرة واحدة، يمكنك تكوين إعدادات الإخطار العامة في خصائص خادم الإدارة.
// KL.KSC.Common—Kaspersky Security Center common counters
"xdr_klserver_errors", "counter", "klserver errors"
"xdr_klserver_api_calls_time", "counter", "klserver api calls time"
// KL.KSC.Transport—Transport counters set
"ksc_Transport__Number_of_all_connections", "counter", "number of all connections"
"ksc_Transport__Number_of_all_nagent_connection", "counter", "number of all Network Agent connection"
"ksc_Transport__Number_of_controlled_nagent_connections", "counter", "number of controlled Network Agent connections"
"ksc_Transport__Total_active_hosts_count", "gauge", "total active devices count"
"ksc_Transport__Number_of_pings_processed", "counter", "number of pings processed"
"ksc_Transport__Number_of_pings_rejected", "counter", "number of pings rejected"
"ksc_Transport__Number_of_ping_processing_errors", "counter", "number of ping processing errors"
"ksc_Transport__Number_of_TCP_connections_accepted", "counter", "number of TCP connections accepted"
"ksc_Transport__Number_of_failed_TCP_connections", "counter", "number of failed TCP connections"
"ksc_Transport__Bytes_sent_by_TCP", "counter", "bytes sent by TCP"
"ksc_Transport__Bytes_received_by_TCP", "counter", "bytes received by TCP"
"ksc_Transport__Number_of_GetNextFileChunk_requests", "counter", "number of GetNextFileChunk requests"
"ksc_Transport__Number_of_GetNextFileChunk_rejected", "counter", "number of GetNextFileChunk rejected"
"ksc_Transport__Bytes_transmitted_through_GetNextFileChunk", "counter", "bytes transmitted through GetNextFileChunk"
// KL.KSC.Events—Events delivery counters set
"ksc_Events__Number_of_event_bulks_processed", "counter", "number of event bulks processed"
"ksc_Events__Number_of_event_bulks_rejected", "counter", "number of event bulks rejected"
"ksc_Events__Number_of_event_bulks_processing_errors", "counter", "number of event bulks processing errors"
"ksc_Events__Number_of_event_bulks_processing_just_now", "gauge", "number of event bulks processing just now"
"ksc_Events__Number_of_events_processed", "counter", "number of events processed"
"ksc_Events__Number_of_events_rejected", "counter", "number of events rejected"
"ksc_Events__Number_of_events_processing_errors", "counter", "number of events processing errors"
"ksc_Events__Number_of_events_processing_just_now", "gauge", "number of events processing just now"
// KL.KSC.Resources—Kaspersky Security Center resources usage
"ksc_Resources__CPU_time_in_user_mode", "counter", "CPU time in user mode"
"ksc_Resources__CPU_time_in_kernel_mode", "counter", "CPU time in kernel mode"
"ksc_Resources__PID_of_klserver_process", "gauge", "process ID of klserver"
"ksc_Resources__PID_of_klnagent_process", "gauge", "process ID of klnagent"
"ksc_Resources__Available_disk_user_quota_for_server_data", "gauge", "available disk user quota for server data"
"ksc_Resources__Available_disk_user_quota_for_packages", "gauge", "available disk user quota for packages"
"ksc_Resources__Current_OpenAPI_threads_count", "counter", "current OpenAPI threads count"
"ksc_Resources__Maximum_OpenAPI_threads_count", "counter", "maximum OpenAPI threads count"
// KL.KSC.NLST
// KL.KSC.NLST.Trans.Common—List of server transactions
"ksc_NLST__Common__Current_transactions_count", "gauge", "current transactions count"
"ksc_NLST__Common__Transactions_queue_ful", "gauge", "transactions queue full"
"ksc_NLST__Common__Transactions_queue_near_to_ful", "gauge", "transactions queue near to full"
// KL.KSC.NLST.InvAppCtrlLink—Application Control link
"ksc_NLST__Application_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Application_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Application_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Application_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Application_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Application_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Application_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Application_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Application_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.InvSoft—Software Inventory
"ksc_NLST__Software_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Software_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Software_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Software_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Software_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Software_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Software_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Software_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Software_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.InvHard—Hardware Inventory
"ksc_NLST__Hardware_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Hardware_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Hardware_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Hardware_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Hardware_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Hardware_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Hardware_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Hardware_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Hardware_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.DevCtrl—Device Control
"ksc_NLST__Device_control__items_changed", "gauge", "items changed"
"ksc_NLST__Device_control__items_deleted", "gauge", "items deleted"
"ksc_NLST__Device_control__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Device_control__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Device_control__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Device_control__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Device_control__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Device_control__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Device_control__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.MDM—Mobile Device Management
"ksc_NLST__Mobile_device_management__items_changed", "gauge", "items changed"
"ksc_NLST__Mobile_device_management__items_deleted", "gauge", "items deleted"
"ksc_NLST__Mobile_device_management__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Mobile_device_management__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Mobile_device_management__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Mobile_device_management__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Mobile_device_management__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Mobile_device_management__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Mobile_device_management__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.MDMmails—Device management emails
"ksc_NLST__Device_management_emails__items_changed", "gauge", "items changed"
"ksc_NLST__Device_management_emails__items_deleted", "gauge", "items deleted"
"ksc_NLST__Device_management_emails__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Device_management_emails__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Device_management_emails__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Device_management_emails__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Device_management_emails__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Device_management_emails__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Device_management_emails__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.AppCtrl—Application Control
"ksc_NLST__Application_control__items_changed", "gauge", "items changed"
"ksc_NLST__Application_control__items_deleted", "gauge", "items deleted"
"ksc_NLST__Application_control__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Application_control__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Application_control__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Application_control__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Application_control__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Application_control__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Application_control__transactions_in_queue", "gauge", "transactions in queue"
"ksc_NLST__Application_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Application_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Application_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Application_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Application_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Application_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Application_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Application_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Application_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.DPEErrors—Data protection errors
"ksc_NLST__Data_protection_errors__items_changed", "gauge", "items changed"
"ksc_NLST__Data_protection_errors__items_deleted", "gauge", "items deleted"
"ksc_NLST__Data_protection_errors__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Data_protection_errors__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Data_protection_errors__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Data_protection_errors__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Data_protection_errors__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Data_protection_errors__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Data_protection_errors__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.iOsMDM—iOS Mobile Device Management
"ksc_NLST__iOS_mobile_device_management__items_changed", "gauge", "items changed"
"ksc_NLST__iOS_mobile_device_management__items_deleted", "gauge", "items deleted"
"ksc_NLST__iOS_mobile_device_management__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__iOS_mobile_device_management__change_item_operations", "gauge", "change item operations"
"ksc_NLST__iOS_mobile_device_management__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__iOS_mobile_device_management__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__iOS_mobile_device_management__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__iOS_mobile_device_management__list_is_pending", "gauge", "list is pending"
"ksc_NLST__iOS_mobile_device_management__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.Vapm—Vulnerability assessment and patch management
"ksc_NLST__Vulnerability_assesment_and_patch_management__items_changed", "gauge", "items changed"
"ksc_NLST__Vulnerability_assesment_and_patch_management__items_deleted", "gauge", "items deleted"
"ksc_NLST__Vulnerability_assesment_and_patch_management__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Vulnerability_assesment_and_patch_management__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Vulnerability_assesment_and_patch_management__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Vulnerability_assesment_and_patch_management__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Vulnerability_assesment_and_patch_management__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Vulnerability_assesment_and_patch_management__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Vulnerability_assesment_and_patch_management__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.Va—Vulnerability assessment
"ksc_NLST__Vulnerability_assesment__items_changed", "gauge", "items changed"
"ksc_NLST__Vulnerability_assesment__items_deleted", "gauge", "items deleted"
"ksc_NLST__Vulnerability_assesment__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Vulnerability_assesment__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Vulnerability_assesment__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Vulnerability_assesment__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Vulnerability_assesment__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Vulnerability_assesment__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Vulnerability_assesment__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.VM—Virtual machines
"ksc_NLST__Virtual_machines__items_changed", "gauge", "items changed"
"ksc_NLST__Virtual_machines__items_deleted", "gauge", "items deleted"
"ksc_NLST__Virtual_machines__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Virtual_machines__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Virtual_machines__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Virtual_machines__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Virtual_machines__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Virtual_machines__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Virtual_machines__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.WUS—Windows Update
"ksc_NLST__Windows_update__items_changed", "gauge", "items changed"
"ksc_NLST__Windows_update__items_deleted", "gauge", "items deleted"
"ksc_NLST__Windows_update__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Windows_update__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Windows_update__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Windows_update__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Windows_update__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Windows_update__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Windows_update__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.CIP_PLC—CIP PLC
"ksc_NLST__CIP_PLC__items_changed", "gauge", "items changed"
"ksc_NLST__CIP_PLC__items_deleted", "gauge", "items deleted"
"ksc_NLST__CIP_PLC__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__CIP_PLC__change_item_operations", "gauge", "change item operations"
"ksc_NLST__CIP_PLC__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__CIP_PLC__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__CIP_PLC__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__CIP_PLC__list_is_pending", "gauge", "list is pending"
"ksc_NLST__CIP_PLC__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.NagentNetScan—Network Agent Network Scan
"ksc_NLST__Network_scan__items_changed", "gauge", "items changed"
"ksc_NLST__Network_scan__items_deleted", "gauge", "items deleted"
"ksc_NLST__Network_scan__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Network_scan__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Network_scan__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Network_scan__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Network_scan__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Network_scan__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Network_scan__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.AS—Adaptive Security
"ksc_NLST__Adaptive_security__items_changed", "gauge", "items changed"
"ksc_NLST__Adaptive_security__items_deleted", "gauge", "items deleted"
"ksc_NLST__Adaptive_security__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Adaptive_security__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Adaptive_security__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Adaptive_security__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Adaptive_security__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Adaptive_security__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Adaptive_security__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.ASS—Adaptive Security State
"ksc_NLST__Adaptive_security_state__items_changed", "gauge", "items changed"
"ksc_NLST__Adaptive_security_state__items_deleted", "gauge", "items deleted"
"ksc_NLST__Adaptive_security_state__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Adaptive_security_state__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Adaptive_security_state__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Adaptive_security_state__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Adaptive_security_state__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Adaptive_security_state__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Adaptive_security_state__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.KillChain—Kill Chain
"ksc_NLST__Kill_chain__items_changed", "gauge", "items changed"
"ksc_NLST__Kill_chain__items_deleted", "gauge", "items deleted"
"ksc_NLST__Kill_chain__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Kill_chain__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Kill_chain__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Kill_chain__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Kill_chain__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Kill_chain__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Kill_chain__transactions_in_queue", "gauge", "transactions in queue"