This table lists the events logged into InTrust Server log by InTrust Agent Manager.
| Event ID | Type | Category | Description | Insertion Strings | 
|---|---|---|---|---|
| 4133 (0x1025) | Information | Real-time Monitoring | Real-time rule '%2' matched on computer '%1'. Details: %5. | %1—Agent name %2—Rule %5—Details | 
| 13568 (0x3500) | Warning | Agent Check | InTrust agent on ‘%1’ not responding. AgentId – %2. | %1—Agent name %2—Agent ID | 
| 13569 (0x3501) | Information | Agent Check | InTrust agent on ‘%1’ is alive. AgentId – %2. | %1—Agent name %2—Agent ID | 
| 13570 (0x3502) | Information | Security | InTrust agent on ‘%1’ has been forced to reauthenticate. AgentId – %2. | %1—Agent name %2—Agent ID | 
| 13571 (0x3503) | Warning | Agent Check | InTrust agent on ‘%1’ not responding for at least %3 second(s). AgentId – %2. | %1—Agent name %2—Agent ID %3—Number of seconds | 
| 13600 (0x3520) | Information | Agent Installation | Agent ‘%1’ unregistered successfully. | %1—Agent name | 
| 13601 (0x3521) | Warning | Agent Installation | The agent ‘%1’ was unregistered, but error occurred. | %1—Agent name | 
| 13602 (0x3522) | Information | Agent Installation | Agent installed successfully on ‘%1’. | %1—Agent name | 
| 13603 (0x3523) | Warning | Agent Installation | Agent installed successfully on ‘%1’, but it cannot connect to the InTrust server. Error text: %2. | %1—Agent name %2—Error text | 
| 13604 (0x3524) | Information | Agent Installation | Preparing to install the agent on ‘%1’. | %1—Agent name | 
| 13605 (0x3525) | Information | Agent Installation | Preparing to unregister the agent ‘%1’ using the following network name: %2. | %1—Agent name | 
| 13606 (0x3526) | Information | Agent Installation | Target computer ‘%1’ is an InTrust server and already has an agent installed. | %1—Agent name | 
| 13607 (0x3527) | Warning | Agent Installation | Agent installation on ‘%1’ was skipped because the target computer is not available. Error text: %2. | %1—Agent name | 
| 13608 (0x3528) | Information | Agent Installation | Cannot unregister the agent on the computer where an InTrust server runs. Computer name: ‘%1’. | %1—Agent name | 
| 13609 (0x3529) | Warning | Agent Installation | Agent installation on ‘%1’ was skipped. Error text: %2. | %1—Agent name | 
| 13616 (0x3530) | Warning | Agent Installation | Preparing to recover the agent on ‘%1’. | %1—Agent name | 
| 13617 (0x3531) | Information | Agent Installation | The agent on ‘%1’ was recovered successfully. | %1—Agent name | 
| 13618 (0x3532) | Information | Security | InTrust agent on ‘%1’ was reauthenticated successfully. AgentId: %2. | %1—Agent name | 
| 13585 (0x3511) | Error | Startup | Failed to get local InTrust server ID. Error code: %2. | 
 | 
| 13586 (0x3512) | Error | Startup | Failed to get InTrust server listening port. Error code: %2. | 
 | 
| 13587 (0x3513) | Error | Startup | Failed to get InTrust server configuration. Error code: %2. | 
 | 
| 13588 (0x3514) | Error | Startup | Failed to initialize Agent Manager. Error code: %2. | 
 | 
| 13590 (0x3516) | Error | Site Operations | Site ‘%2’ enumeration error: %3. | 
 | 
| 13632 (0x3540) | Error | Agent Installation | Cannot unregister the ‘%1’ agent. Error text: %2. | %1—Agent name | 
| 13633 (0x3541) | Error | Agent Installation | Failed to prepare for agent installation on ‘%1’. Error text: %2. | %1—Agent name | 
| 13634 (0x3542) | Error | Agent Installation | Failed to unregister the ‘%1’ agent. Error text: %2. | %1—Agent name | 
| 13635 (0x3543) | Error | Agent Installation | Cannot install the agent on ‘%1’ because of an error. Error text: %2. | %1—Agent name | 
| 13637 (0x3545) | Error | Agent Installation | Cannot recover the agent on ‘%1’ because of an error. Error text: %2. | %1—Agent name | 
| 13639 (0x3547) | Error | Agent Installation | Cannot install the agent on ‘%1’ because of an error. Error text: %2. | %1—Agent name | 
| 13640 (0x3548) | Error | Agent Installation | Cannot uninstall the agent from ‘%1’ because of an error. Error text: %2. | %1—Agent name | 
| 13650 (0x3552) | Warning | Security | Incoming connection attempt has been failed. Source address: %1. Error text: %2. | %1—IP address | 
| 13619 (0x3533) | Warning | Agent Installation | Cannot upgrade the agent on '%1' because of an error. Error text: %2. | %1—Agent name | 
| 13620 (0x3534) | Warning | Agent Installation | Cannot upgrade the agent on '%1' because of an error. Error text: %2. | %1—Agent name | 
| 13621 (0x3535) | Information | Agent Installation | Agent installation on '%1' was skipped because automatic agent deployment is disabled for Site '%2'. | %1—Agent name | 
| 13622 (0x3536) | Warning | Agent Installation | Agent installation on '%1' was skipped because automatic agent deployment is disabled. | %1—Agent name | 
This table lists the events logged by InTrust Monitoring Engine.
| Event ID | Type | Category | Description | Insertion Strings | 
|---|---|---|---|---|
| 4096 (0x1000) | Information | Startup | “Quest InTrust Real-Time service started.” | |
| 4097 (0x1001) | Information | Startup | “Quest InTrust Real-Time service stopped.” | |
| 4098 (0x1002) | Information | Site Operations | “Agent ‘%1’ added to site %2.” | %1—Agent name %2—Site name | 
| 4099 (0x1003) | Information | Site Operations | “Agent ‘%1’ removed from site %2.” | %1—Agent name %2—Site name | 
| 4100 (0x1004) | Information | Agent Configuring | “Reconfiguration started.” | |
| 4101 (0x1005) | Information | Agent Configuring | “Reconfiguration finished.” | |
| 4102 (0x1006) | Information | Agent Configuring | “Starting component installation on ‘%1’ agent.” | %1—Agent name | 
| 4103 (0x1007) | Information | Agent Configuring | “Installation of component(s) on ‘%1’ agent finished.” | %1—Agent name | 
| 4104 (0x1008) | Information | Agent Configuring | “Sending configuration to the agent ‘%1’.” | %1—Agent name | 
| 4105 (0x1009) | Information | Agent Configuring | “Agent ‘%1’ configuration finished.” | %1—Agent name | 
| 4106 (0x100a) | Information | Agent Configuring | “Disabling monitoring task on ‘%1’ agent because there are no rule(s) assigned to the agent.” | %1—Agent name | 
| 4107 (0x100b) | Information | Agent Configuring | “Monitoring task on ‘%1’ agent was disabled successfully because there were no rule(s) assigned to the agent.” | %1—Agent name | 
| 4108 (0x100c) | Information | Agent Check | “Agent on ‘%1’ responded after unavailability period. Monitoring was resumed on this agent.” | %1—Agent name | 
| 4109 (0x100d) | Warning | Agent Check | “No response received from ‘%1’ agent in a timely fashion. Monitoring was temporarily suspended on this agent.” | %1—Agent name | 
| 4110 (0x100e) | Error | Agent Check | “Agent on ‘%1’ is not available. Monitoring was stopped on this agent.” | %1—Agent name | 
| 4111 (0x100f) | Warning | Agent Check | “Agent on ‘%1’ is not available. Monitoring service will no longer attempt to configure this agent.” | %1—Agent name | 
| 4112 (0x1010) | Error | Real-time Monitoring | "Cannot write to repository '%1'. Make sure the repository is configured correctly, and check the InTrust Server log for relevant errors. Details: %2." | %1—Repository name %2—Error text | 
| 8192 (0x2000) | Error | Real-time Monitoring | “Notification for rule '%2' failed. Error text: %3.” | %2—Rule name %3—Error text | 
| 8193 (0x2001) | Error | Real-time Monitoring | “Failed to save alert in the alert database. Error text: %2.” | %2—Error text | 
| 8195 (0x2003) | Error | Agent Configuring | “Component %2 failed to install on the ‘%1’ agent. Error text: %3.” | %1—Agent name %2—CLSID %3—Error text | 
| 8196 (0x2004) | Error | Agent Configuring | “Component(s) installation on ‘%1’ agent finished with error: %2.” | %1—Agent name %2—Error text | 
| 8197 (0x2005) | Error | Agent Configuring | “Configuration finished on agent ‘%1’ with error: %2.” | %1—Agent name %2—Error text | 
| 8198 (0x2006) | Warning | Agent Configuring | “Real-time monitoring disabled with errors on ‘%1’ agent.” | %1—Agent name | 
| 8199 (0x2007) | Error | Agent Configuring | “Failed to disable real-time monitoring on ‘%1’ agent. Error text: %2.” | %1—Agent name %2—Error text | 
| 8200 (0x2008) | Error | Agent Configuring | “Rule '%2' deployment skipped for ‘%1’ agent: not all required components were installed on the agent.” | %1—Agent name %2—Rule name | 
| 8201 (0x2009) | Error | Agent Configuring | “Failed to enable real-time monitoring on ‘%1’ agent. Error text: %2.” | %1—Agent name %2—Error text | 
| 8202 (0x200A) | Error | Startup | “Real-Time Monitoring service failed to start. Error text: %2.” | %2—Error text | 
| 8203 (0x200B) | Error | License | “License verification failed. Error text: %2.” | %2—Error text | 
| 8204 (0x200C) | Warning | Agent Configuring | “Component(s) installation on ‘%1’ agent finished with errors” | %1—Agent name | 
| 8205 (0x200D) | Warning | Agent Configuring | “Configuration finished on agent '%1'. Some errors occurred during configuration.” | %1—Agent name | 
| 8206 (0x200E) | Error | Agent Configuring | Distributable modules failed to install on agent '%1'. Error text: %2 | %1—Agent name %2—Error text | 
| 8207 (0x200F) | Error | License | License verification failed. Details: %2 To resume InTrust operation, please make sure that a valid license is available. After that, the product will start working automatically within %3 minutes or less. Alternatively, you can launch it manually by restarting the Quest InTrust Real-Time Monitoring Server service. | %2—Error details %3— Time period between configuration updates (in minutes) | 
| 821 (0x2013) | Error | Startup | RPC Self-Audit cannot be initialized. Error code 0x%2. Error text: %3. | %2—error code %3—error text | 
This table lists the events logged by InTrust Scheduled Tasks Manager.
| Event ID | Type | Category | Description | Insertion Strings | 
|---|---|---|---|---|
| 13312 (0x3400) | Information | Task Scheduling | “Task ‘%2’ started on schedule.” | %2—Task name | 
| 13313 (0x3401) | Information | Task Scheduling | “Job ‘%2’ from task ‘%3’ completed successfully.” | %2—Job name %3—Task name | 
| 13314 (0x3402) | Warning | Task Scheduling | “Job ‘%2’ from task ‘%3’ completed with warning.” | %2—Job name %3—Task name | 
| 13315 (0x3403) | Information | Task Scheduling | “Job ‘%2’ completed successfully.” | %2—Job name | 
| 13316 (0x3404) | Warning | Task Scheduling | “Job ‘%2’ completed with warning.” | %2—Job name | 
| 13336 (0x3418) | Error | Task Scheduling | “Job ‘%2’ from task ‘%3’ completed with error. Error code: %4.” | %2—Job name %3—Task name %4—Error code (decimal) | 
| 13346 (0x3422) | Error | Task Scheduling | “Job ‘%2’ completed with error. Error code: %4.” | %2—Job name %4—Error code (decimal) | 
This table lists the events logged by InTrust Server.
| Event ID | Type | Category | Description | Insertion Strings | 
|---|---|---|---|---|
| 5185 (0x1441) | Information | Startup | InTrust Server started. | 
 | 
| 5186 (0x1442) | Information | Startup | InTrust Server stopped. | 
 | 
| 5187 (0x1443) | Information | General | The current version is %2, the current timezone is ‘(UTC%4) %3’. | %2—InTrust version %3—Timezone designation %4—UTC offset | 
| 5121 (0x1401) | Error | Startup | Cannot start InTrust Server module '%2'. Error code: 0x%3. | %2—Module UUID %3—Error code | 
| 5122 (0x1402) | Error | General | InTrust Server module %2 depends on the module %3 that failed to start. | %2—Dependent Module UUID %3—Base Module UUID | 
| 5123 (0x1403) | Error | General | Circular InTrust Server module dependency occurred. Module: %2. | %2—Module UUID | 
| 5124 (0x1404) | Error | General | Cannot terminate InTrust Server module %2. Error code: 0x%3. | %2—Module UUID %3—Error code | 
| 5125 (0x1405) | Error | General | Unknown InTrust Server module %3 in dependency list. Dependent module: %2. | %2—Dependent Module UUID %3—Base Module UUID | 
| 5126 (0x1406) | Warning | General | Invalid InTrust Server configuration entry. Module: %2. | %2—Module UUID | 
| 5127 (0x1407) | Error | Startup | Cannot start InTrust Server. Error code: 0x%2. | %2—Error code | 
| 5128 (0x1408) | Error | General | Local RPC connection is not available. Error code: 0x%2.%0 | %2—Error code | 
| 5129 (0x1409) | Error | General | InTrust Server local configuration update failed. Error code: 0x%2, Error text: %3. | %2—Error code %3—Error text | 
| 5130 (0x140A) | Error | General | Local InTrust Server ID could not be read. | 
 | 
| 5131 (0x140B) | Warning | General | No RPC endpoints registered by InTrust Server. | 
 | 
| 5132 (0x140C) | Warning | General | InTrust Server cannot register RPC endpoint '%2/%3'. Error code 0x%4, Error text: %5. | %2—RPC protocol %3—RPC endpoint %4—Error code (hex) %5—Error description | 
| 5133 (0x140D) | Error | Startup | Cannot start InTrust Server because one or more of its critical modules were not loaded. | 
 | 
| 5134 (0x140E) | Warning | General | InTrust Server cannot register security and authentication settings for the incoming RPC connections (%2). Error code 0x%3, Error text: %4 | %2—Security protocol %3—Error code (hex) %4—Error description | 
| 5135 (0x140F) | Warning | General | InTrust Server cannot set the client security for the local RPC connections (%2). Error code 0x%3, Error text: %4 | %2—Security protocol %3—Error code (hex) %4—Error description | 
| 5136 (0x1410) | Error | General | Cannot initialize ADC runtime. Status code 0x%2. Error text: %3 | %2—ADC error code (hex) %3—ADC error description | 
| 5137 (0x1411) | Error | License | InTrust Server license check failed. Error code 0x%2, Error text: %3 | %2—Error code (hex) %3—Error text | 
| 5138 (0x1412) | Warning | General | InTrust Server cannot register endpoints in RPC Name Service. Error code 0x%2. Error text: %3. | %2—Error code (hex) %3—Error text | 
| 5140 (0x1414) | Error | Startup | RPC Self-Audit cannot be initialized. Error code 0x%2. Error text: %3. | %2—error code %3—error text |