Alert ID Message and Description:

1. EM-000 Initializing RSA DLP Enterprise Manager Bootstrap Message. This message is sent when a SIEM configuration is created or updated.

2. EM-999 RSA DLP Enterprise Manager release number.build number Heartbeat Message. This message is sent every hour to indicate that Enterprise Manager is up and running.

3. EM-001 Low disk space on DLP partition This alert is sent if the disk space on system partition falls below a specified value. The system partition is the drive on which Enterprise Manager is installed; by default C:\Program Files\RSA\Enterprise Manager The default value is 50MB.

4. EM-002 Low disk space on matched files partition This alert is sent if the disk space on the matched files partition falls below a specified value. The matched files partition is the drive where matched content data is stored; by default C:\rsaThe default value is 50MB.

5. EM-003 Unable to communicate with the database. This alert is sent if the Enterprise Manager cannot connect to the database.

6. EM-004 Unexpected error while indexing events/incidents This alert is sent if an exception is thrown while indexing events and incidents.

7. EM-005 Unable to communicate with Enterprise Coordinator This alert is sent when there is a loss of connectivity between Enterprise Manager and Enterprise Coordinator.

8. EM-006 Unable to communicate with Network Controller This alert is sent when there is a loss of connectivity between Enterprise Manager and Network Controller.

9. EM-007 Unable to communicate with Event Loader This alert is sent when there is a loss of connectivity between Enterprise Manager and the Event Loader.

10. EM-008 RSA DLP CA certificate aliased - {0} is going to expire on {1} This alert is sent when a certificate is about to expire in the DLP Endpoint infrastructure.

11. EM-009 Unable to communicate with Endpoint Coordinator This alert is sent when one or more the Endpoint Coordinators did not report the status for a specified duration.

12. EM-010 Unable to communicate with Endpoint Coordinator web server This alert is sent when the Enterprise Manager is unable to communicate with the web server that is used as the file store for the Root Endpoint Coordinator.

13. EM-011 Unable to communicate with Endpoint Coordinator message broker This alert is sent when the Enterprise Manager is unable to communicate with the Message Broker component on the Root Endpoint Coordinator. The Enterprise Manager cannot receive status messages from the Endpoint components until this problem is resolved.

14. EM-012 Unable to communicate with Endpoint Coordinator Certificate join service This alert is sent when the Enterprise Manager is unable to communicate with the Certificate Services component on the Root Endpoint Coordinator. The Enterprise Manager cannot renew or issue certificates to Endpoint Coordinators and Endpoint agents until this problem is resolved. 

15. EM-013 Datacenter Grid Scan Finished This alert is sent when a grid scan is complete.

16. EM-014 Datacenter Agent Scan Finished This alert is sent when an agent scan is complete.

17. EM-015 Exceeded total size of Endpoint Fingerprint This alert is sent when the total size of the Fingerprinted-Content Blades used by the Endpoint policies exceed a specified limit. The Enterprise Manager cannot send policy updates until problem is resolved.

18. EM-016 RSA DLP Endpoint infrastructure will switch to a new CA Certificate on New-CA-start-date. Agents must renew certificates by Existing-CA-Expiry-Date This alert is sent when the validity of the existing CA certificate is about to expire. The Endpoint agent certificates are renewed before the expiry of the existing CA certificate.