RSA Authentication Manager Log Messages (16221-16290)
The following table lists AM log messages based on the event category and action ID. It also lists the corresponding action key, description, and log message. The log message has placeholders in the “{number}” format, which represents actual data in the logs and Activity Monitor.
Use this table to understand simple network management protocol (SNMP) trap information captured by a network management system. For more information on the information displayed by the object identifier structure (OID) in the SNMP trap, see RSA Authentication Manager SNMP.
Event Category | Action ID | Action Key | Description | Message |
eventSystem | 16221 | CREATE_TRUST_INSTANCE | Create trust instance | Administrator “{0}” attempted to create a trust instance |
eventSystem | 16222 | UPDATE_TRUST_INSTANCE | Update trust instance | Administrator “{0}” attempted to update a trust instance |
eventSystem | 16223 | READ_TRUST_INSTANCE | Read trust instance | Administrator “{0}” attempted to read a trust instance |
eventSystem | 16224 | DELETE_TRUST_INSTANCE | Delete trust instance | Administrator “{0}” attempted to delete a trust instance |
eventSystem | 16225 | READ_DATA_FILE_USAGE | Read data file usage | Administrator “{0}” attempted to read a usage data file |
eventSystem | 16226 | READ_LOG_FILE_USAGE | Read log file usage | Administrator “{0}” attempted to read a log usage file |
eventSystem | 16227 | DB_SPACE_USAGE_ALERT | Database space usage alert | The database storage monitoring process produced an alert |
eventSystem | 16228 | CREATE_ATTRIBUTE | Create attribute | Administrator “{0}” attempted to create an attribute category |
eventSystem | 16229 | UPDATE_ATTRIBUTE | Update attribute | Administrator “{0}” attempted to update an attribute category |
eventSystem | 16230 | SEND_SMTP_MESSAGE | Send SMTP message | System attempted to send an SMTP message to “{3}” with the subject “{4}” |
eventSystem | 16231 | SMTP_CONNECT | SMTP connect | System attempted to connect to the SMTP server in order to configure it |
eventSystem | 16232 | DB_BACKUP_RESTORE | Database backup and restore | System attempted to back up or restore the database |
eventSystem | 16233 | DB_SPACE_USAGE | Database space management | System attempted to configure the database table space usage |
eventSystem | 16234 | ORACLE_COMMON | Oracle common management utility | System attempted to configure the Oracle database |
eventSystem | 16235 | SNMP_TEST_TRAP | SNMP test trap | System attempted to send an SNMP test trap |
eventSystem | 16236 | DELETE_SIGNING_KEY | Delete log signing key | System attempted to delete a log signing key with GUID “{3}” |
eventSystem | 16237 | FLUSH_COMMAND_TARGET | Flush command target cache | System flushed the command target cache |
eventSystem | 16238 | FLUSH_COMMAND_TARGET | Flush command target cache entry | System flushed a command target cache entry |
eventSystem | 16239 | CREATE_COMMAND_TARGET | Create command target | System attempted to create a command target for trust “{4}” |
eventSystem | 16240 | STORE_PWD_DIC | Store password dictionary | System attempted to store the password dictionary |
eventSystem | 16241 | ARCHIVE_LOG_FILE_SIGN | Sign archive log file | An archive log batch job tried to sign archive log file “{3}” |
eventSystem | 16242 | ARCHIVE_LOG_FILE_VERIFY | Verify archive log file signature | An archive log batch job tried to verify the signature of file “{3}” |
eventSystem | 16243 | XML_SERIALIZER | XML serializer configuration | XML serializer tried to perform a configuration |
eventSystem | 16244 | XML_SERIALIZER | XML serializer initializing | XML serializer tried to initialize the engine |
eventSystem | 16245 | XML_SERIALIZER_BEAN | XML serializer parsing failure | XML serializer failed to parse bean structure for class “{3}” ; property “{4}” |
eventSystem | 16246 | XML_SERIALIZER_PARSING | XML serializer parsing failure | XML serializer failed to parse the XML structure |
eventSystem | 16247 | XML_SERIALIZER_CLASS | XML serializer class-loading failure | XML serializer failed to load class “{3}” |
eventSystem | 16248 | CLU_AUDIT_LOG_COPY | Copy audit log entries | Batch job attempted to copy CLU audit log entries from table “{3}” |
eventSystem | 16249 | SESSION_MAX_LIMIT | Force session logoff | Session was terminated because it exceeded the maximum number of sessions allowed per instance |
eventSystem | 16250 | SESSION_USER_LIMIT | Force session logoff | Session was terminated because it exceeded the maximum number of sessions allowed per user |
eventSystem | 16252 | REGISTRY_INIT | Initialize deployment UUID | System attempted to initialize the deployment UUID |
eventSystem | 16253 | PROCESS_SECURITY | Processing answers to security questions | System was processing the user's answers to security questions |
eventSystem | 16254 | REPLICATION_PROCESS | Replication process status | Replication propagation process restarting for scheduled maintenance |
eventSystem | 16255 | CONF_VALUE_DELETED | Delete configuration | Administrator “{0}” deleted configuration parameter “{3}” from scope “{4}” ; value “{5}”. {6} |
eventSystem | 16256 | CONF_VALUE_UPDATED | Update configuration | Administrator “{0}” updated configuration parameter “{3}” for scope “{4}” ; value “{5}”. {6} |
eventSystem | 16257 | SYNC_PROPERTIES | Synchronize properties | Synchronize system properties. |
eventSystem | 16274 | DATABASE_BACKUP | Database backup | System attempted to backup the database |
eventSystem | 16258 | UPDATE_BATCH_JOB_STATUS | Update batch job status | System failed to update batch job's status |
eventSystem | 16276 | OC_PROMOTE_REPLICA | Promote replica to be primary via OC | Operations Console administrator “{0}” attempted to promote a replica instance to primary instance |
eventSystem | 16277 | OC_ADD_REPLICA | Add replica to primary via OC | Operations Console administrator “{0}” attempted to add replica instance “{3}” |
eventSystem | 16278 | OC_REMOVE_REPLICA | Remove replica via OC | Operations Console administrator “{0}” attempted to remove a replica instance |
eventSystem | 16279 | OC_ATTACH_REPLICA | Attach detached replica via OC | Operations Console administrator “{0}” attempted to reattach a replica instance to the primary instance |
eventSystem | 16280 | OC_REPLICATION_STATUS | View replication status via OC | Operations Console administrator “{0}” attempted to view replication status |
eventSystem | 16281 | OC_CLEAN_DEMOTED _PRIMARY | Clean demoted primary via OC | Operations Console administrator “{0}” attempted to clean the demoted primary instance |
eventSystem | 16282 | OC_ATTACH_DEMOTED | Attach a demoted primary instance via OC | Operations Console administrator “{0}” attempted to attach a demoted primary instance |
eventSystem | 16283 | OC_CLEAN_DELETED | Clean a replica deleted when offline via OC | Operations Console administrator “{0}” attempted to clean an offline replica instance that was previously deleted |
eventSystem | 16284 | OC_LIST_INSTANCES | List all instances via OC | Operations Console administrator “{0}” attempted to list all instances in the deployment |
eventSystem | 16285 | OC_SYNC_REPLICA | Synchronize replica with primary instances via OC | Operations Console administrator “{0}” attempted to synchronize all replicas instances |
eventSystem | 16259 | REPLICATION_LINK_STATUS | Check replication status | System checked replicaton status between the primary {3} and the replica {4} in the direction {5} |
eventSystem | 16260 | REPLICATION_ARCHIVE_LOG | Check replication archive log usage | System checked replication archive log usage and found {3} MB used out of {4} MB allocated |
eventSystem | 16261 | BATCH_CLEANUP | Clean up unresolvable users and groups | The system attempted to clean up unresolvable principals ; but was unable to clean up user “{3}” in identity source “{4}”. |
eventSystem | 16262 | BATCH_CLEANUP | Clean up unresolvable users and groups | Cleanup of unresolvable users was not possible. Found {3} users ; which exceeded the automated cleanup limit of {4} users. |
eventSystem | 16263 | FIND_PRINCIPAL_ACROSS | Find user across Identity Sources | System attempted to find user “{0}” across identity sources |
eventSystem | 16264 | MARK_FIND_PRINCIPAL | System cannot process this authentication request | User cannot be found across identity sources. User “{3}” will not be allowed to authenticate for the next 60 minutes. |
eventSystem | 16265 | DETERMINE_RELATED | Attempting to determine whether the given identity sources connect to the same directory server | System cannot determine whether identity source “{3}” and identity source “{4}” are connecting to the same directory server. |
eventSystem | 16266 | SEARCH_PRINCIPALS | Search users | System attempted to search users in identity source “{3}” |
eventSystem | 16286 | READ_SECURITY | Read security questions list | Administrator “{0}” attempted to read security questions list “{4}” |
eventSystem | 16287 | RBA_USER_COUNT | RBA user count | System attempted to count the number of RBA users |
eventSystem | 16288 | AA_OFFLINE_TASK | AA offline task | System attempted to run AA offline task |
eventSystem | 16289 | RBA_DEVICE_MANAGEMENT | RBA device management | System attempted to cleanup expired and over the limit user devices |
eventSystem | 16290 | STOP_SERVICE | Stop service | Attempting to stop service “{3}” |
Related Articles
How to restore the Server Nodes configuration in RSA Identity Governance & Lifecycle 301Number of Views Importing a token via CT-KIP fails indicating that the token already exists 79Number of Views Guide to Microsoft Active Directory LDAP synchronization with RSA Authentication Manager 423Number of Views Error when importing wildcard certificates to RSA Authentication Manager 8.x 516Number of Views RSA Authentication Agent 8.0 for Web for Apache Web Server Installation and Configuration Guide 124Number of Views
Trending Articles
Downloading RSA Authentication Manager license files or RSA Software token seed records RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA Authentication Manager 8.9 Release Notes (January 2026) Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA Release Notes for RSA Authentication Manager 8.8