Message Level

Error
Turns on message logging for errors only.
 
Warning
Turns on message logging for warnings and errors.
 
Info
Turns on message logging for all informational, warning and error messages.
 
Audit
Turns on message logging for all audit, informational, warning and error messages.
 
Trace
Allows all messages to be logged, including those used for debugging purposes.

User Security Options for handling Execution

Require user ID and password to start process
When this option is checked, Universal Event Monitor will require a valid user ID and password to execute an event handler process. That process will then be executed in the security context of the specified user account.
 
Load the user’s environment
When checked, causes Universal Event Monitor Server to load the profile and the environment settings for the user account specified in the event handler when the handler process is executed. This is necessary only if the process requires access to user-specific environment variables, or registry values that are only stored under the HKEY_CURRENT_USER key.
 
Allow handler process to interact with desktop
When this option is checked, event handler processes are run in a context that permits the current console logon session to interact with them. This also allows the process to invoke system functions that access desktop elements (for example, Windows, menus, buttons) associated with that session. Accordingly, this exposes a risk whereby a process could hijack the desktop and invoke malicious code using a (potentially) elevated security context.
Leaving this option unchecked causes event handler processes to execute in a context that isolates them from the current interactive logon session. Unless event handler processes that require user interaction are executed, this is the recommended setting.
This option only applies if a user account (in whose security context an event handler process is executed) is authenticated via an interactive logon. If the User must have batch logon right option is checked, a batch logon is done to establish the process's security context. This logon method requires additional privileges but disallows all interaction with the desktop.
 
User must have Batch logon right
When this option is checked, the Log on as a batch job user right must be granted to the user ID specified in the event handler before the process will run. This is an advanced user right that must be set using the Windows User Manager.

Polling Interval

Specifies the frequency with which UEM Server will check (and update, if necessary) the active or inactive state of an enabled event definition. For those events that are active, any new occurrences of system events will also be detected at this time.

Keep alive interval

This value specifies the frequency with which a demand driven UEM Server sends a keep alive message to the Universal Event Monitor Manager. This message ensures that the control session between the UEM Manager and Server remains open even when there is no monitoring activity or other information to send across that connection.
The default value for this option is 120 seconds. The maximum allowed value is 900 seconds. Set this value to 0 (zero) to instruct UEM Server not to send the keep alive message.

Code Page

Sets the translation table used to translate text-based data transmitted across the network.

Default Event Handler Options

If no triggered handler is specified, use the following
The ID of a stored event handler that will be executed when an occurrence of an event is triggered, if no such handler is specified in that event's definition. This value may be left blank to indicate that no action should be taken by default for triggered event occurrences.
 
If no reject handler is specified, use the following
The ID of a stored event handler that will be executed when an occurrence of an event is rejected, if no such handler is specified in that event's definition. This value may be left blank to indicate that no action should be taken by default for rejected event occurrences.
 
If no expired handler is specified, use the following
The ID of a stored event handler that will be executed when an an event expires, if no such handler is specified in that event's definition. This value may be left blank to indicate that no action should be taken by default for expired events.
 
Default script type
Specifies the how a script will be interpreted by the operating system for an event handler with an action type of SCRIPT, if no script type is specified in the event handler definition.
 
Maximum acceptable return code
Lists the types of events supported by UEM Server. Default configuration options that are specific to the selected event type may be updated by selecting the Edit... button.

Default Component Name

Specifies the event driven UEM Server component (that is, those components with a component type of "uems") to which an event will be assigned if no component name is specified when the event definition is created. When this event driven UEM Server component starts, it will load and monitor those events that have been assigned to it. An event may not be assigned to a demand-driven UEM Server component (that is, those components with a component type of "uemd"), and only event-driven UEM Server components are listed here.

Tracking interval

Specifies the frequency with which a tracked event occurrence will be tested for completeness, if no such value is provided in the event definition. A value of 0 indicates that an event occurrence will not be tracked, and will be tested for completeness as soon as the occurrence is detected by UEM Server.

Set event-specific options

Lists the types of events supported by UEM Server. Default configuration options that are specific to the selected event type may be updated by selecting the Edit... button.

Edit Button

Displays a dialog from which configuration options that are specific to the selected event type may be updated.
 

• $(compname)
  the name of the UEM Server component

• $(compid)
  the ID of the UEM Server component instance

• $(date)
  the current date, in yyyymmdd format

• $(time)
  the current time, in hhmmss format

• $(origname)
  the original file name

• $(origext)
  the file's original extension

• $(seqnum)
  a value that begins at 1 and is incremented by 1 as each file is renamed by a given instance of UEM Server.

Minimum file size
Specifies the default file size a tracked file must be before it can be considered complete. That is, if a tracked file is tested for completeness and its file size is the same on two consecutive checks, the file will not be considered complete until it grows to at least the size specified here. This value may be overridden in the event definition.