Elevate24

Appearance

Monitoring - Event Types ​

Elevate24 Session Reporting can log a variety of data points while the user is elevated. It’s important to configure the event types and select the data you want to report on.

Event Types ​

  • Availability: Premium
  • Type: Array
xml
<key>EventsToLog</key>
	<array>
		<dict>
			<key>eventType</key>
			<string>File:Write</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>File:Unlink</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>File:Clone</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>File:CopyFile</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>File:Create</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>File:Rename</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>User:Create</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>User:Delete</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>Profile:Add</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>Profile:Remove</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>LaunchItem:Add</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>LaunchItem:Remove</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>Sudo</string>
		</dict>
		<dict>
			<key>eventType</key>
			<string>Process:Exec</string>
		</dict>
	</array>

Log all event types ​

  • Availability: Premium
  • Type: Boolean
  • Default: false

WARNING

Enabling this option will report back every eventType as per the above. This could be a lot of data. Please use carefully.

xml
<key>logAllEventTypes</key>
<true/>