Show / Hide Table of Contents

Class UsageLogEvent

An event logged on the device.

Inheritance
object
UsageLogEvent
Implements
IDirectResponseSchema
Inherited Members
object.Equals(object)
object.Equals(object, object)
object.GetHashCode()
object.GetType()
object.MemberwiseClone()
object.ReferenceEquals(object, object)
object.ToString()
Namespace: Google.Apis.AndroidManagement.v1.Data
Assembly: Google.Apis.AndroidManagement.v1.dll
Syntax
public class UsageLogEvent : IDirectResponseSchema

Properties

AdbShellCommandEvent

A shell command was issued over ADB via “adb shell command”. Part of SECURITY_LOGS.

Declaration
[JsonProperty("adbShellCommandEvent")]
public virtual AdbShellCommandEvent AdbShellCommandEvent { get; set; }
Property Value
Type Description
AdbShellCommandEvent

AdbShellInteractiveEvent

An ADB interactive shell was opened via “adb shell”. Part of SECURITY_LOGS.

Declaration
[JsonProperty("adbShellInteractiveEvent")]
public virtual AdbShellInteractiveEvent AdbShellInteractiveEvent { get; set; }
Property Value
Type Description
AdbShellInteractiveEvent

AppProcessStartEvent

An app process was started. Part of SECURITY_LOGS.

Declaration
[JsonProperty("appProcessStartEvent")]
public virtual AppProcessStartEvent AppProcessStartEvent { get; set; }
Property Value
Type Description
AppProcessStartEvent

BackupServiceToggledEvent

An admin has enabled or disabled backup service. Part of SECURITY_LOGS.

Declaration
[JsonProperty("backupServiceToggledEvent")]
public virtual BackupServiceToggledEvent BackupServiceToggledEvent { get; set; }
Property Value
Type Description
BackupServiceToggledEvent

CertAuthorityInstalledEvent

A new root certificate was installed into the system's trusted credential storage. Part of SECURITY_LOGS.

Declaration
[JsonProperty("certAuthorityInstalledEvent")]
public virtual CertAuthorityInstalledEvent CertAuthorityInstalledEvent { get; set; }
Property Value
Type Description
CertAuthorityInstalledEvent

CertAuthorityRemovedEvent

A root certificate was removed from the system's trusted credential storage. Part of SECURITY_LOGS.

Declaration
[JsonProperty("certAuthorityRemovedEvent")]
public virtual CertAuthorityRemovedEvent CertAuthorityRemovedEvent { get; set; }
Property Value
Type Description
CertAuthorityRemovedEvent

CertValidationFailureEvent

An X.509v3 certificate failed to validate, currently this validation is performed on the Wi-FI access point and failure may be due to a mismatch upon server certificate validation. However it may in the future include other validation events of an X.509v3 certificate. Part of SECURITY_LOGS.

Declaration
[JsonProperty("certValidationFailureEvent")]
public virtual CertValidationFailureEvent CertValidationFailureEvent { get; set; }
Property Value
Type Description
CertValidationFailureEvent

ConnectEvent

A TCP connect event was initiated through the standard network stack. Part of NETWORK_ACTIVITY_LOGS.

Declaration
[JsonProperty("connectEvent")]
public virtual ConnectEvent ConnectEvent { get; set; }
Property Value
Type Description
ConnectEvent

CryptoSelfTestCompletedEvent

Validates whether Android’s built-in cryptographic library (BoringSSL) is valid. Should always succeed on device boot, if it fails, the device should be considered untrusted. Part of SECURITY_LOGS.

Declaration
[JsonProperty("cryptoSelfTestCompletedEvent")]
public virtual CryptoSelfTestCompletedEvent CryptoSelfTestCompletedEvent { get; set; }
Property Value
Type Description
CryptoSelfTestCompletedEvent

DnsEvent

A DNS lookup event was initiated through the standard network stack. Part of NETWORK_ACTIVITY_LOGS.

Declaration
[JsonProperty("dnsEvent")]
public virtual DnsEvent DnsEvent { get; set; }
Property Value
Type Description
DnsEvent

ETag

The ETag of the item.

Declaration
public virtual string ETag { get; set; }
Property Value
Type Description
string

EnrollmentCompleteEvent

Device has completed enrollment. Part of AMAPI_LOGS.

Declaration
[JsonProperty("enrollmentCompleteEvent")]
public virtual EnrollmentCompleteEvent EnrollmentCompleteEvent { get; set; }
Property Value
Type Description
EnrollmentCompleteEvent

EventId

Unique id of the event.

Declaration
[JsonProperty("eventId")]
public virtual long? EventId { get; set; }
Property Value
Type Description
long?

EventTime

object representation of EventTimeRaw.

Declaration
[JsonIgnore]
[Obsolete("This property is obsolete and may behave unexpectedly; please use EventTimeDateTimeOffset instead.")]
public virtual object EventTime { get; set; }
Property Value
Type Description
object

EventTimeDateTimeOffset

DateTimeOffset representation of EventTimeRaw.

Declaration
[JsonIgnore]
public virtual DateTimeOffset? EventTimeDateTimeOffset { get; set; }
Property Value
Type Description
DateTimeOffset?

EventTimeRaw

Device timestamp when the event was logged.

Declaration
[JsonProperty("eventTime")]
public virtual string EventTimeRaw { get; set; }
Property Value
Type Description
string

EventType

The particular usage log event type that was reported on the device. Use this to determine which event field to access.

Declaration
[JsonProperty("eventType")]
public virtual string EventType { get; set; }
Property Value
Type Description
string

FilePulledEvent

A file was downloaded from the device. Part of SECURITY_LOGS.

Declaration
[JsonProperty("filePulledEvent")]
public virtual FilePulledEvent FilePulledEvent { get; set; }
Property Value
Type Description
FilePulledEvent

FilePushedEvent

A file was uploaded onto the device. Part of SECURITY_LOGS.

Declaration
[JsonProperty("filePushedEvent")]
public virtual FilePushedEvent FilePushedEvent { get; set; }
Property Value
Type Description
FilePushedEvent

KeyDestructionEvent

A cryptographic key including user installed, admin installed and system maintained private key is removed from the device either by the user or management. Part of SECURITY_LOGS.

Declaration
[JsonProperty("keyDestructionEvent")]
public virtual KeyDestructionEvent KeyDestructionEvent { get; set; }
Property Value
Type Description
KeyDestructionEvent

KeyGeneratedEvent

A cryptographic key including user installed, admin installed and system maintained private key is installed on the device either by the user or management. Part of SECURITY_LOGS.

Declaration
[JsonProperty("keyGeneratedEvent")]
public virtual KeyGeneratedEvent KeyGeneratedEvent { get; set; }
Property Value
Type Description
KeyGeneratedEvent

KeyImportEvent

A cryptographic key including user installed, admin installed and system maintained private key is imported on the device either by the user or management. Part of SECURITY_LOGS.

Declaration
[JsonProperty("keyImportEvent")]
public virtual KeyImportEvent KeyImportEvent { get; set; }
Property Value
Type Description
KeyImportEvent

KeyIntegrityViolationEvent

A cryptographic key including user installed, admin installed and system maintained private key is determined to be corrupted due to storage corruption, hardware failure or some OS issue. Part of SECURITY_LOGS.

Declaration
[JsonProperty("keyIntegrityViolationEvent")]
public virtual KeyIntegrityViolationEvent KeyIntegrityViolationEvent { get; set; }
Property Value
Type Description
KeyIntegrityViolationEvent

KeyguardDismissAuthAttemptEvent

An attempt was made to unlock the device. Part of SECURITY_LOGS.

Declaration
[JsonProperty("keyguardDismissAuthAttemptEvent")]
public virtual KeyguardDismissAuthAttemptEvent KeyguardDismissAuthAttemptEvent { get; set; }
Property Value
Type Description
KeyguardDismissAuthAttemptEvent

KeyguardDismissedEvent

The keyguard was dismissed. Part of SECURITY_LOGS.

Declaration
[JsonProperty("keyguardDismissedEvent")]
public virtual KeyguardDismissedEvent KeyguardDismissedEvent { get; set; }
Property Value
Type Description
KeyguardDismissedEvent

KeyguardSecuredEvent

The device was locked either by user or timeout. Part of SECURITY_LOGS.

Declaration
[JsonProperty("keyguardSecuredEvent")]
public virtual KeyguardSecuredEvent KeyguardSecuredEvent { get; set; }
Property Value
Type Description
KeyguardSecuredEvent

LogBufferSizeCriticalEvent

The audit log buffer has reached 90% of its capacity, therefore older events may be dropped. Part of SECURITY_LOGS.

Declaration
[JsonProperty("logBufferSizeCriticalEvent")]
public virtual LogBufferSizeCriticalEvent LogBufferSizeCriticalEvent { get; set; }
Property Value
Type Description
LogBufferSizeCriticalEvent

LoggingStartedEvent

usageLog policy has been enabled. Part of SECURITY_LOGS.

Declaration
[JsonProperty("loggingStartedEvent")]
public virtual LoggingStartedEvent LoggingStartedEvent { get; set; }
Property Value
Type Description
LoggingStartedEvent

LoggingStoppedEvent

usageLog policy has been disabled. Part of SECURITY_LOGS.

Declaration
[JsonProperty("loggingStoppedEvent")]
public virtual LoggingStoppedEvent LoggingStoppedEvent { get; set; }
Property Value
Type Description
LoggingStoppedEvent

LostModeLocationEvent

A lost mode location update when a device in lost mode.

Declaration
[JsonProperty("lostModeLocationEvent")]
public virtual LostModeLocationEvent LostModeLocationEvent { get; set; }
Property Value
Type Description
LostModeLocationEvent

LostModeOutgoingPhoneCallEvent

An outgoing phone call has been made when a device in lost mode.

Declaration
[JsonProperty("lostModeOutgoingPhoneCallEvent")]
public virtual LostModeOutgoingPhoneCallEvent LostModeOutgoingPhoneCallEvent { get; set; }
Property Value
Type Description
LostModeOutgoingPhoneCallEvent

MediaMountEvent

Removable media was mounted. Part of SECURITY_LOGS.

Declaration
[JsonProperty("mediaMountEvent")]
public virtual MediaMountEvent MediaMountEvent { get; set; }
Property Value
Type Description
MediaMountEvent

MediaUnmountEvent

Removable media was unmounted. Part of SECURITY_LOGS.

Declaration
[JsonProperty("mediaUnmountEvent")]
public virtual MediaUnmountEvent MediaUnmountEvent { get; set; }
Property Value
Type Description
MediaUnmountEvent

OsShutdownEvent

Device was shutdown. Part of SECURITY_LOGS.

Declaration
[JsonProperty("osShutdownEvent")]
public virtual OsShutdownEvent OsShutdownEvent { get; set; }
Property Value
Type Description
OsShutdownEvent

OsStartupEvent

Device was started. Part of SECURITY_LOGS.

Declaration
[JsonProperty("osStartupEvent")]
public virtual OsStartupEvent OsStartupEvent { get; set; }
Property Value
Type Description
OsStartupEvent

RemoteLockEvent

The device or profile has been remotely locked via the LOCK command. Part of SECURITY_LOGS.

Declaration
[JsonProperty("remoteLockEvent")]
public virtual RemoteLockEvent RemoteLockEvent { get; set; }
Property Value
Type Description
RemoteLockEvent

StopLostModeUserAttemptEvent

An attempt to take a device out of lost mode.

Declaration
[JsonProperty("stopLostModeUserAttemptEvent")]
public virtual StopLostModeUserAttemptEvent StopLostModeUserAttemptEvent { get; set; }
Property Value
Type Description
StopLostModeUserAttemptEvent

WipeFailureEvent

The work profile or company-owned device failed to wipe when requested. This could be user initiated or admin initiated e.g. delete was received. Part of SECURITY_LOGS.

Declaration
[JsonProperty("wipeFailureEvent")]
public virtual WipeFailureEvent WipeFailureEvent { get; set; }
Property Value
Type Description
WipeFailureEvent

Implements

IDirectResponseSchema
In this article
Back to top Generated by DocFX