Insight powered by AppSense

Ivanti Audit Events

To collect data from Ivanti Environment Manager and Application Control, auditing must be configured in both consoles. In Environment Manager, the events allow the reporting of success and failure for Pre-Session, Pre-Desktop, Desktop Created and legacy events. For Application Control, Insight collects data on applications that have been blocked.

In both Ivanti applications, auditing must be configured to send events to either the application or AppSense event logs.

Enable Audit Events in Ivanti Software

1. Open the Environment Manager or Application Control console.

2. Select Manage > Auditing.

   The Auditing dialog displays.

3. Select one of the following auditing behaviors:
   • Send events to Application event log
   • Send events to AppSense event log

4. Select the required events:

   Ivanti Application	Event
   Application Control	9000 Denied execution
   Environment Manager	9405 - Self healing service stopped 9406 - Self healing service started 9436 - User logon (pre-session) action success 9437 - User logon (pre-session) action fail 9438 - User logon (pre-desktop) action success 9439 - User logon (pre-desktop) action fail 9440 - User logon (desktop created) action success 9441 - User logon (desktop created) action fail

5. Click OK.