EventType

  • Usage log event types indicate that a specific event has been set, correlating to various actions and system states.

  • These events cover a wide range of activities including shell commands, app processes, keyguard states, file operations, certificate management, cryptographic events, logging, media mounting, operating system events, remote actions, network activity, lost mode actions, enrollment, and backup service toggling.

  • Each listed event type has a corresponding linked event field that has been set.

  • EVENT_TYPE_UNSPECIFIED is a listed enum value that is not used.

Usage log event type.

Enums
EVENT_TYPE_UNSPECIFIED This value is not used
ADB_SHELL_COMMAND Indicates adbShellCommandEvent has been set.
ADB_SHELL_INTERACTIVE Indicates adbShellInteractiveEvent has been set.
APP_PROCESS_START

Indicates appProcessStartEvent has been set.
KEYGUARD_DISMISSED Indicates keyguardDismissedEvent has been set.
KEYGUARD_DISMISS_AUTH_ATTEMPT Indicates keyguardDismissAuthAttemptEvent has been set.
KEYGUARD_SECURED Indicates keyguardSecuredEvent has been set.
FILE_PULLED Indicates filePulledEvent has been set.
FILE_PUSHED Indicates filePushedEvent has been set.
CERT_AUTHORITY_INSTALLED Indicates certAuthorityInstalledEvent has been set.
CERT_AUTHORITY_REMOVED Indicates certAuthorityRemovedEvent has been set.
CERT_VALIDATION_FAILURE Indicates certValidationFailureEvent has been set.
CRYPTO_SELF_TEST_COMPLETED Indicates cryptoSelfTestCompletedEvent has been set.
KEY_DESTRUCTION Indicates keyDestructionEvent has been set.
KEY_GENERATED Indicates keyGeneratedEvent has been set.
KEY_IMPORT Indicates keyImportEvent has been set.
KEY_INTEGRITY_VIOLATION Indicates keyIntegrityViolationEvent has been set.
LOGGING_STARTED Indicates loggingStartedEvent has been set.
LOGGING_STOPPED Indicates loggingStoppedEvent has been set.
LOG_BUFFER_SIZE_CRITICAL Indicates logBufferSizeCriticalEvent has been set.
MEDIA_MOUNT Indicates mediaMountEvent has been set.
MEDIA_UNMOUNT Indicates mediaUnmountEvent has been set.
OS_SHUTDOWN Indicates osShutdownEvent has been set.
OS_STARTUP Indicates osStartupEvent has been set.
REMOTE_LOCK Indicates remoteLockEvent has been set.
WIPE_FAILURE Indicates wipeFailureEvent has been set.
CONNECT Indicates connectEvent has been set.
DNS Indicates dnsEvent has been set.
STOP_LOST_MODE_USER_ATTEMPT Indicates stopLostModeUserAttemptEvent has been set.
LOST_MODE_OUTGOING_PHONE_CALL Indicates lostModeOutgoingPhoneCallEvent has been set.
LOST_MODE_LOCATION Indicates lostModeLocationEvent has been set.
ENROLLMENT_COMPLETE Indicates enrollmentCompleteEvent has been set.
BACKUP_SERVICE_TOGGLED Indicates backupServiceToggledEvent has been set.