Le tableau ci-dessous indique les types d'événements du Serveur d'administration de Kaspersky Security Center, regroupés par niveau de gravité Critique.
Pour chaque événement pouvant être généré par une application, vous pouvez spécifier les paramètres de notification et les paramètres de stockage sous l'onglet Configuration des événements dans la stratégie de l'application. Pour le Serveur d'administration, vous pouvez également consulter et configurer la liste des événements dans les propriétés du Serveur d'administration. Si vous souhaitez configurer les paramètres de notification pour tous les événements à la fois, configurez les paramètres de notification généraux dans les propriétés du Serveur d'administration.
// KL.KSC.Common—Kaspersky Security Center common counters
"xdr_klserver_errors", "counter", "klserver errors"
"xdr_klserver_api_calls_time", "counter", "klserver api calls time"
// KL.KSC.Transport—Transport counters set
"ksc_Transport__Number_of_all_connections", "counter", "number of all connections"
"ksc_Transport__Number_of_all_nagent_connection", "counter", "number of all Network Agent connection"
"ksc_Transport__Number_of_controlled_nagent_connections", "counter", "number of controlled Network Agent connections"
"ksc_Transport__Total_active_hosts_count", "gauge", "total active devices count"
"ksc_Transport__Number_of_pings_processed", "counter", "number of pings processed"
"ksc_Transport__Number_of_pings_rejected", "counter", "number of pings rejected"
"ksc_Transport__Number_of_ping_processing_errors", "counter", "number of ping processing errors"
"ksc_Transport__Number_of_TCP_connections_accepted", "counter", "number of TCP connections accepted"
"ksc_Transport__Number_of_failed_TCP_connections", "counter", "number of failed TCP connections"
"ksc_Transport__Bytes_sent_by_TCP", "counter", "bytes sent by TCP"
"ksc_Transport__Bytes_received_by_TCP", "counter", "bytes received by TCP"
"ksc_Transport__Number_of_GetNextFileChunk_requests", "counter", "number of GetNextFileChunk requests"
"ksc_Transport__Number_of_GetNextFileChunk_rejected", "counter", "number of GetNextFileChunk rejected"
"ksc_Transport__Bytes_transmitted_through_GetNextFileChunk", "counter", "bytes transmitted through GetNextFileChunk"
// KL.KSC.Events—Events delivery counters set
"ksc_Events__Number_of_event_bulks_processed", "counter", "number of event bulks processed"
"ksc_Events__Number_of_event_bulks_rejected", "counter", "number of event bulks rejected"
"ksc_Events__Number_of_event_bulks_processing_errors", "counter", "number of event bulks processing errors"
"ksc_Events__Number_of_event_bulks_processing_just_now", "gauge", "number of event bulks processing just now"
"ksc_Events__Number_of_events_processed", "counter", "number of events processed"
"ksc_Events__Number_of_events_rejected", "counter", "number of events rejected"
"ksc_Events__Number_of_events_processing_errors", "counter", "number of events processing errors"
"ksc_Events__Number_of_events_processing_just_now", "gauge", "number of events processing just now"
// KL.KSC.Resources—Kaspersky Security Center resources usage
"ksc_Resources__CPU_time_in_user_mode", "counter", "CPU time in user mode"
"ksc_Resources__CPU_time_in_kernel_mode", "counter", "CPU time in kernel mode"
"ksc_Resources__PID_of_klserver_process", "gauge", "process ID of klserver"
"ksc_Resources__PID_of_klnagent_process", "gauge", "process ID of klnagent"
"ksc_Resources__Available_disk_user_quota_for_server_data", "gauge", "available disk user quota for server data"
"ksc_Resources__Available_disk_user_quota_for_packages", "gauge", "available disk user quota for packages"
"ksc_Resources__Current_OpenAPI_threads_count", "counter", "current OpenAPI threads count
"ksc_Resources__Maximum_OpenAPI_threads_count", "counter", "maximum OpenAPI threads count"
// KL.KSC.NLST
// KL.KSC.NLST.Trans.Common—List of server transactions
"ksc_NLST__Common__Current_transactions_count", "gauge", "current transactions count
"ksc_NLST__Common__Transactions_queue_ful", "gauge", "transactions queue full"
"ksc_NLST__Common__Transactions_queue_near_to_ful", "gauge", "transactions queue near to full"
// KL.KSC.NLST.InvAppCtrlLink—Application Control link
"ksc_NLST__Application_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Application_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Application_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Application_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Application_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Application_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Application_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Application_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Application_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.InvSoft—Software Inventory
"ksc_NLST__Software_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Software_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Software_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Software_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Software_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Software_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Software_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Software_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Software_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.InvHard—Hardware Inventory
"ksc_NLST__Hardware_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Hardware_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Hardware_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Hardware_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Hardware_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Hardware_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Hardware_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Hardware_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Hardware_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.DevCtrl—Device Control
"ksc_NLST__Device_control__items_changed", "gauge", "items changed"
"ksc_NLST__Device_control__items_deleted", "gauge", "items deleted"
"ksc_NLST__Device_control__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Device_control__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Device_control__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Device_control__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Device_control__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Device_control__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Device_control__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.MDM—Mobile Device Management
"ksc_NLST__Mobile_device_management__items_changed", "gauge", "items changed"
"ksc_NLST__Mobile_device_management__items_deleted", "gauge", "items deleted"
"ksc_NLST__Mobile_device_management__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Mobile_device_management__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Mobile_device_management__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Mobile_device_management__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Mobile_device_management__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Mobile_device_management__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Mobile_device_management__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.MDMmails—Device management emails
"ksc_NLST__Device_management_emails__items_changed", "gauge", "items changed"
"ksc_NLST__Device_management_emails__items_deleted", "gauge", "items deleted"
"ksc_NLST__Device_management_emails__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Device_management_emails__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Device_management_emails__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Device_management_emails__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Device_management_emails__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Device_management_emails__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Device_management_emails__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.AppCtrl—Application Control
"ksc_NLST__Application_control__items_changed", "gauge", "items changed"
"ksc_NLST__Application_control__items_deleted", "gauge", "items deleted"
"ksc_NLST__Application_control__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Application_control__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Application_control__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Application_control__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Application_control__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Application_control__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Application_control__transactions_in_queue", "gauge", "transactions in queue"
"ksc_NLST__Application_inventory__items_changed", "gauge", "items changed"
"ksc_NLST__Application_inventory__items_deleted", "gauge", "items deleted"
"ksc_NLST__Application_inventory__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Application_inventory__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Application_inventory__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Application_inventory__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Application_inventory__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Application_inventory__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Application_inventory__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.DPEErrors—Data protection errors
"ksc_NLST__Data_protection_errors__items_changed", "gauge", "items changed"
"ksc_NLST__Data_protection_errors__items_deleted", "gauge", "items deleted"
"ksc_NLST__Data_protection_errors__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Data_protection_errors__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Data_protection_errors__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Data_protection_errors__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Data_protection_errors__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Data_protection_errors__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Data_protection_errors__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.iOsMDM—iOS Mobile Device Management
"ksc_NLST__iOS_mobile_device_management__items_changed", "gauge", "items changed"
"ksc_NLST__iOS_mobile_device_management__items_deleted", "gauge", "items deleted"
"ksc_NLST__iOS_mobile_device_management__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__iOS_mobile_device_management__change_item_operations", "gauge", "change item operations"
"ksc_NLST__iOS_mobile_device_management__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__iOS_mobile_device_management__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__iOS_mobile_device_management__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__iOS_mobile_device_management__list_is_pending", "gauge", "list is pending"
"ksc_NLST__iOS_mobile_device_management__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.Vapm—Vulnerability assessment and patch management
"ksc_NLST__Vulnerability_assesment_and_patch_management__items_changed", "gauge", "items changed"
"ksc_NLST__Vulnerability_assesment_and_patch_management__items_deleted", "gauge", "items deleted"
"ksc_NLST__Vulnerability_assesment_and_patch_management__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Vulnerability_assesment_and_patch_management__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Vulnerability_assesment_and_patch_management__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Vulnerability_assesment_and_patch_management__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Vulnerability_assesment_and_patch_management__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Vulnerability_assesment_and_patch_management__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Vulnerability_assesment_and_patch_management__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.Va—Vulnerability assessment
"ksc_NLST__Vulnerability_assesment__items_changed", "gauge", "items changed"
"ksc_NLST__Vulnerability_assesment__items_deleted", "gauge", "items deleted"
"ksc_NLST__Vulnerability_assesment__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Vulnerability_assesment__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Vulnerability_assesment__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Vulnerability_assesment__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Vulnerability_assesment__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Vulnerability_assesment__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Vulnerability_assesment__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.VM—Virtual machines
"ksc_NLST__Virtual_machines__items_changed", "gauge", "items changed"
"ksc_NLST__Virtual_machines__items_deleted", "gauge", "items deleted"
"ksc_NLST__Virtual_machines__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Virtual_machines__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Virtual_machines__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Virtual_machines__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Virtual_machines__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Virtual_machines__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Virtual_machines__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.WUS—Windows Update
"ksc_NLST__Windows_update__items_changed", "gauge", "items changed"
"ksc_NLST__Windows_update__items_deleted", "gauge", "items deleted"
"ksc_NLST__Windows_update__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Windows_update__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Windows_update__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Windows_update__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Windows_update__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Windows_update__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Windows_update__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.CIP_PLC—CIP PLC
"ksc_NLST__CIP_PLC__items_changed", "gauge", "items changed"
"ksc_NLST__CIP_PLC__items_deleted", "gauge", "items deleted"
"ksc_NLST__CIP_PLC__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__CIP_PLC__change_item_operations", "gauge", "change item operations"
"ksc_NLST__CIP_PLC__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__CIP_PLC__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__CIP_PLC__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__CIP_PLC__list_is_pending", "gauge", "list is pending"
"ksc_NLST__CIP_PLC__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.NagentNetScan—Network Agent Network Scan
"ksc_NLST__Network_scan__items_changed", "gauge", "items changed"
"ksc_NLST__Network_scan__items_deleted", "gauge", "items deleted"
"ksc_NLST__Network_scan__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Network_scan__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Network_scan__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Network_scan__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Network_scan__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Network_scan__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Network_scan__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.AS—Adaptive Security
"ksc_NLST__Adaptive_security__items_changed", "gauge", "items changed"
"ksc_NLST__Adaptive_security__items_deleted", "gauge", "items deleted"
"ksc_NLST__Adaptive_security__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Adaptive_security__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Adaptive_security__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Adaptive_security__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Adaptive_security__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Adaptive_security__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Adaptive_security__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.ASS—Adaptive Security State
"ksc_NLST__Adaptive_security_state__items_changed", "gauge", "items changed"
"ksc_NLST__Adaptive_security_state__items_deleted", "gauge", "items deleted"
"ksc_NLST__Adaptive_security_state__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Adaptive_security_state__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Adaptive_security_state__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Adaptive_security_state__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Adaptive_security_state__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Adaptive_security_state__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Adaptive_security_state__transactions_in_queue", "gauge", "transactions in queue"
// KL.KSC.NLST.KillChain—Kill Chain
"ksc_NLST__Kill_chain__items_changed", "gauge", "items changed"
"ksc_NLST__Kill_chain__items_deleted", "gauge", "items deleted"
"ksc_NLST__Kill_chain__DeleteAll_items", "gauge", "DeleteAll() items"
"ksc_NLST__Kill_chain__change_item_operations", "gauge", "change item operations"
"ksc_NLST__Kill_chain__list_is_disabled_due_to_oversize", "gauge", "list is disabled due to oversize"
"ksc_NLST__Kill_chain__transactions_queue_full", "gauge", "transactions queue full"
"ksc_NLST__Kill_chain__transactions_queue_near_to_full", "gauge", "transactions queue near to full"
"ksc_NLST__Kill_chain__list_is_pending", "gauge", "list is pending"
"ksc_NLST__Kill_chain__transactions_in_queue", "gauge", "transactions in queue"