Previous Topic: EventMajorTypeNext Topic: EventSubType


EventMinorType

EventMinorType is used to qualify the specific type of event. The interpretation of this value depends on the EventMajorType.

Notes

 

For an EventMajorType of '1', the possible values of EventMinorType are:

6

Web page.

64

A file from the Content Classification Service (CCS).

For an EventMajorType of '2', the possible values of EventMinorType are:

2

An email that the user has read (client integration).

3

An email captured manually by the user (client integration).

4

An email that was captured in transit (server integration).

16

An email that has been sent (client integration).

17

An email that has been received but was not read (i.e. blocked - client integration).

18

An email that was canceled after being sent (not transmitted - client integration).

32

An email that contains an embedded IM conversation

48

An email that contains an embedded FAX (usually as an image file attachment)

64

An email from a Bloomberg terminal

For an EventMajorType of '3', the possible values of EventMinorType are:

1

An active application updated its monitored data.

16

The active application was de-activated.

For an EventMajorType of '4', the possible values of EventMinorType are:

1

A chapter of an IM conversation.

For an EventMajorType of '5', the possible values of EventMinorType are:

1

A file at rest on a local or network volume.

2

A file at rest in a Microsoft Exchange public folder

3

A file at rest in a Microsoft Sharepoint folder

4

Data at rest in a database

16

A file moving on the network containing web data (captured by the Network Boundary Agent or ICAP agent)

32

A file moving to a removable storage device

48

A file moving to a printer