The table below shows the event types of Kaspersky Security Center Administration Server that have the Critical importance level.
For each event that can be generated by an application, you can specify notification settings and storage settings on the Event configuration tab in the application policy. For Administration Server, you can additionally view and configure the event list in the Administration Server properties. If you want to configure notification settings for all the events at once, configure general notification settings in the Administration Server properties.
// KL.KSC.Common—Kaspersky Security Center common counters
"xdr_klserver_errors", "counter", "klserver errors"
"xdr_klserver_api_calls_time", "counter", "klserver api calls time"
// KL.KSC.Transport—Transport counters set
"ksc_Transport__Number_of_all_connections", "counter", "number of all connections"
"ksc_Transport__Number_of_all_nagent_connection", "counter", "number of all Network Agent connection"
"ksc_Transport__Number_of_controlled_nagent_connections", "counter", "number of controlled Network Agent connections"
"ksc_Transport__Total_active_hosts_count", "gauge", "total active devices count"
"ksc_Transport__Number_of_pings_processed", "counter", "number of pings processed"
"ksc_Transport__Number_of_pings_rejected", "counter", "number of pings rejected"
"ksc_Transport__Number_of_ping_processing_errors", "counter", "number of ping processing errors"
"ksc_Transport__Number_of_TCP_connections_accepted", "counter", "number of TCP connections accepted"
"ksc_Transport__Number_of_failed_TCP_connections", "counter", "number of failed TCP connections"
"ksc_Transport__Bytes_sent_by_TCP", "counter", "bytes sent by TCP"
"ksc_Transport__Bytes_received_by_TCP", "counter", "bytes received by TCP"
"ksc_Transport__Number_of_GetNextFileChunk_requests", "counter", "number of GetNextFileChunk requests"
"ksc_Transport__Number_of_GetNextFileChunk_rejected", "counter", "number of GetNextFileChunk rejected"
"ksc_Transport__Bytes_transmitted_through_GetNextFileChunk", "counter", "bytes transmitted through GetNextFileChunk"
// KL.KSC.Events—Events delivery counters set
"ksc_Events__Number_of_event_bulks_processed", "counter", "number of event bulks processed"
"ksc_Events__Number_of_event_bulks_rejected", "counter", "number of event bulks rejected"
"ksc_Events__Number_of_event_bulks_processing_errors", "counter", "number of event bulks processing errors"
"ksc_Events__Number_of_event_bulks_processing_just_now", "gauge", "number of event bulks processing just now"
"ksc_Events__Number_of_events_processed", "counter", "number of events processed"
"ksc_Events__Number_of_events_rejected", "counter", "number of events rejected"
"ksc_Events__Number_of_events_processing_errors", "counter", "number of events processing errors"
"ksc_Events__Number_of_events_processing_just_now", "gauge", "number of events processing just now"
// KL.KSC.Resources—Kaspersky Security Center resources usage
"ksc_Resources__CPU_time_in_user_mode", "counter", "CPU time in user mode"
"ksc_Resources__CPU_time_in_kernel_mode", "counter", "CPU time in kernel mode"
"ksc_Resources__PID_of_klserver_process", "gauge", "process ID of klserver"
"ksc_Resources__PID_of_klnagent_process", "gauge", "process ID of klnagent"
"ksc_Resources__Available_disk_user_quota_for_server_data", "gauge", "available disk user quota for server data"
"ksc_Resources__Available_disk_user_quota_for_packages", "gauge", "available disk user quota for packages"
"ksc_Resources__Current_OpenAPI_threads_count", "counter", "current OpenAPI threads count"
"ksc_Resources__Maximum_OpenAPI_threads_count", "counter", "maximum OpenAPI threads count"
// KL.KSC.NLST
// KL.KSC.NLST.Trans.Common—List of server transactions
"ksc_NLST__Common__Current_transactions_count", "gauge", "current transactions count"
"ksc_NLST__Common__Transactions_queue_ful", "gauge", "transactions queue full"
"ksc_NLST__Common__Transactions_queue_near_to_ful", "gauge", "transactions queue near to full"
// KL.KSC.NLST.InvAppCtrlLink—Application Control link
"ksc_NLST__Application_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Application_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Application_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Application_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Application_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Application_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Application_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Application_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Application_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.InvSoft—Software Inventory
"ksc_NLST__Software_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Software_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Software_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Software_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Software_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Software_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Software_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Software_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Software_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.InvHard—Hardware Inventory
"ksc_NLST__Hardware_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Hardware_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Hardware_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Hardware_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Hardware_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Hardware_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Hardware_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Hardware_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Hardware_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.DevCtrl—Device Control
"ksc_NLST__Device_control__items_changed", "gauge", "items changed"
"ksc_NLST__Device_control__items_deleted", "gauge", "items deleted"
"ksc_NLST__Device_control__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Device_control__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Device_control__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Device_control__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Device_control__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Device_control__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Device_control__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.MDM—Mobile Device Management
"ksc_NLST__Mobile_device_management__items_changed", "gauge", "items changed"
"ksc_NLST__Mobile_device_management__items_deleted", "gauge", "items deleted"
"ksc_NLST__Mobile_device_management__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Mobile_device_management__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Mobile_device_management__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Mobile_device_management__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Mobile_device_management__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Mobile_device_management__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Mobile_device_management__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.MDMmails—Device management emails
"ksc_NLST__Device_management_emails__items_changed", "gauge", "items changed"
"ksc_NLST__Device_management_emails__items_deleted", "gauge", "items deleted"
"ksc_NLST__Device_management_emails__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Device_management_emails__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Device_management_emails__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Device_management_emails__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Device_management_emails__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Device_management_emails__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Device_management_emails__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.AppCtrl—Application Control
"ksc_NLST__Application_control__items_changed", "gauge", "items changed"
"ksc_NLST__Application_control__items_deleted", "gauge", "items deleted"
"ksc_NLST__Application_control__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Application_control__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Application_control__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Application_control__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Application_control__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Application_control__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Application_control__transactions_in_queue", "gauge", "transactions in queue"
"ksc_NLST__Application_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Application_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Application_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Application_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Application_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Application_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Application_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Application_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Application_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.DPEErrors—Data protection errors
"ksc_NLST__Data_protection_errors__items_changed", "gauge", "items changed"
"ksc_NLST__Data_protection_errors__items_deleted", "gauge", "items deleted"
"ksc_NLST__Data_protection_errors__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Data_protection_errors__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Data_protection_errors__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Data_protection_errors__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Data_protection_errors__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Data_protection_errors__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Data_protection_errors__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.iOsMDM—iOS Mobile Device Management
"ksc_NLST__iOS_mobile_device_management__items_changed", "gauge", "items changed"
"ksc_NLST__iOS_mobile_device_management__items_deleted", "gauge", "items deleted"
"ksc_NLST__iOS_mobile_device_management__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__iOS_mobile_device_management__change_item_operations", "gauge", "change item operations"
"ksc_NLST__iOS_mobile_device_management__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__iOS_mobile_device_management__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__iOS_mobile_device_management__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__iOS_mobile_device_management__list_is_pending", "gauge", "list is pending"
"ksc_NLST__iOS_mobile_device_management__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.Vapm—Vulnerability assessment and patch management
"ksc_NLST__Vulnerability_assesment_and_patch_management__items_changed", "gauge", "items changed"
"ksc_NLST__Vulnerability_assesment_and_patch_management__items_deleted", "gauge", "items deleted"
"ksc_NLST__Vulnerability_assesment_and_patch_management__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Vulnerability_assesment_and_patch_management__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Vulnerability_assesment_and_patch_management__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Vulnerability_assesment_and_patch_management__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Vulnerability_assesment_and_patch_management__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Vulnerability_assesment_and_patch_management__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Vulnerability_assesment_and_patch_management__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.Va—Vulnerability assessment
"ksc_NLST__Vulnerability_assesment__items_changed", "gauge", "items changed"
"ksc_NLST__Vulnerability_assesment__items_deleted", "gauge", "items deleted"
"ksc_NLST__Vulnerability_assesment__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Vulnerability_assesment__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Vulnerability_assesment__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Vulnerability_assesment__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Vulnerability_assesment__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Vulnerability_assesment__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Vulnerability_assesment__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.VM—Virtual machines
"ksc_NLST__Virtual_machines__items_changed", "gauge", "items changed"
"ksc_NLST__Virtual_machines__items_deleted", "gauge", "items deleted"
"ksc_NLST__Virtual_machines__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Virtual_machines__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Virtual_machines__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Virtual_machines__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Virtual_machines__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Virtual_machines__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Virtual_machines__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.WUS—Windows Update
"ksc_NLST__Windows_update__items_changed", "gauge", "items changed"
"ksc_NLST__Windows_update__items_deleted", "gauge", "items deleted"
"ksc_NLST__Windows_update__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Windows_update__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Windows_update__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Windows_update__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Windows_update__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Windows_update__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Windows_update__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.CIP_PLC—CIP PLC
"ksc_NLST__CIP_PLC__items_changed", "gauge", "items changed"
"ksc_NLST__CIP_PLC__items_deleted", "gauge", "items deleted"
"ksc_NLST__CIP_PLC__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__CIP_PLC__change_item_operations", "gauge", "change item operations"
"ksc_NLST__CIP_PLC__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__CIP_PLC__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__CIP_PLC__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__CIP_PLC__list_is_pending", "gauge", "list is pending"
"ksc_NLST__CIP_PLC__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.NagentNetScan—Network Agent Network Scan
"ksc_NLST__Network_scan__items_changed", "gauge", "items changed"
"ksc_NLST__Network_scan__items_deleted", "gauge", "items deleted"
"ksc_NLST__Network_scan__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Network_scan__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Network_scan__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Network_scan__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Network_scan__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Network_scan__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Network_scan__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.AS—Adaptive Security
"ksc_NLST__Adaptive_security__items_changed", "gauge", "items changed"
"ksc_NLST__Adaptive_security__items_deleted", "gauge", "items deleted"
"ksc_NLST__Adaptive_security__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Adaptive_security__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Adaptive_security__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Adaptive_security__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Adaptive_security__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Adaptive_security__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Adaptive_security__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.ASS—Adaptive Security State
"ksc_NLST__Adaptive_security_state__items_changed", "gauge", "items changed"
"ksc_NLST__Adaptive_security_state__items_deleted", "gauge", "items deleted"
"ksc_NLST__Adaptive_security_state__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Adaptive_security_state__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Adaptive_security_state__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Adaptive_security_state__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Adaptive_security_state__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Adaptive_security_state__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Adaptive_security_state__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.KillChain—Kill Chain
"ksc_NLST__Kill_chain__items_changed", "gauge", "items changed"
"ksc_NLST__Kill_chain__items_deleted", "gauge", "items deleted"
"ksc_NLST__Kill_chain__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Kill_chain__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Kill_chain__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Kill_chain__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Kill_chain__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Kill_chain__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Kill_chain__transactions_in_queue", "gauge", "transactions in queue"