Diagnostic

account

---

AccountExpired

Your trial ended on ${ExpiryDate} and your account will be on hold for ${NumHoldDays} days from that date.  During the hold period, all backup jobs will be paused and no further changes can be made.  Your POC data will be deleted after ${HoldEndDate}.  To continue using the product, contact your Account Executive to purchase a license.

Severity	Status	Audit Event
Critical	Success	No

AccountExpiryWarning

Hello, We want to remind you that your account is expiring in ${noOfDaysBeforeHold} days and that your existing data will not be available after that time. Act now to extend your features or buy additional features! Retain your existing data and continue to enjoy all the benefits of Rubrik data protection. For information, please contact our friendly sales professionals at sales@rubrik.com. Thank you, Rubrik

Severity	Status	Audit Event
Warning	Success	No

app_failover

---

RefreshAwsNetResourcesConnectToEc2ClientFailed

Failed to connect to ec2 client: ${reason}.

Severity	Status	Audit Event
Critical	TaskFailure	No

RefreshAwsNetResourcesEc2ClientFailed

Failed to sync AWS networking resources in '${cloudAccount}(${region})': ${reason}.

Severity	Status	Audit Event
Critical	TaskFailure	No

RefreshAwsNetResourcesFailoverCanceled

Canceled sync AWS networking resources in '${account}'.

Severity	Status	Audit Event
Info	Canceled	No

RefreshAwsNetResourcesFailoverCanceling

Canceling sync AWS networking resources in '${account}'.

Severity	Status	Audit Event
Info	Canceling	No

RefreshAwsNetResourcesFailoverFailed

Failed to sync AWS networking resources in '${account}': ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

RefreshAwsNetResourcesFailoverStarted

Started to sync AWS networking resources in '${account}'.

Severity	Status	Audit Event
Info	TaskSuccess	No

RefreshAwsNetResourcesFailoverSuccess

Synced AWS networking resources in '${account}': processed '${totalNum}' cloud locations.

Severity	Status	Audit Event
Info	Success	No

RefreshAwsNetResourcesGetCloudAccountFailed

Failed to get cloud account ${name} in '${account}': ${reason}.

Severity	Status	Audit Event
Critical	TaskFailure	No

RefreshAwsNetResourcesQueryArchivalLocationFailed

Failed to query cloud locations in '${account}': ${reason}.

Severity	Status	Audit Event
Critical	TaskFailure	No

ValidateAppBlueprintResourceMappingFailed

Failed to validate recovery spec for recovery plan '${name}' in '${account}': ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

ValidateResourceMappingCanceled

Canceled validate recovery specs for recovery plans in '${account}'.

Severity	Status	Audit Event
Info	Canceled	No

ValidateResourceMappingCanceling

Canceling validate recovery specs for recovery plans in '${account}'.

Severity	Status	Audit Event
Info	Canceling	No

ValidateResourceMappingFailed

Failed to validate recovery specs for recovery plans in '${account}': ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

ValidateResourceMappingQueryAppBlueprintsFailed

Failed to query recovery plans in '${account}': ${reason}.

Severity	Status	Audit Event
Critical	TaskFailure	No

ValidateResourceMappingStarted

Started validating recovery specs for recovery plans in '${account}'.

Severity	Status	Audit Event
Info	TaskSuccess	No

ValidateResourceMappingSuccess

Validated recovery specs for recovery plans in '${account}': processed '${totalNum}' and found recovery specs are invalid for '${invalidNum}' recovery plans.

Severity	Status	Audit Event
Info	Success	No

awsnative

---

AwsSnapshotsMissing

One or more rubrik managed snapshots are missing from AWS account ${awsAccountDisplayName}. Total ${missingEc2SnapshotCount} AMIs and ${missingEbsSnapshotCount} volume snapshots are missing. Details of missing snapshots have been emailed to ${accountOwnersEmails}.

Severity	Status	Audit Event
Warning	Failure	No

azurenative

---

AzureSnapshotsMissing

One or more rubrik managed snapshots are missing from Azure subscription ${azureSubscriptionDisplayName}. Total ${missingVMSnapshotCount} VM snapshots, ${missingVMRepSnapshotCount} VM replicated snapshots, ${missingDiskSnapshotCount} disk snapshots and ${missingDiskRepSnapshotCount} disk replicated snapshots are missing.

Severity	Status	Audit Event
Critical	Failure	No

AzureSqlDatabaseServerDeleted

One or more Rubrik managed Azure SQL Servers are missing from Azure subscription ${azureSubscriptionDisplayName}. Missing Azure SQL Servers: ${missingSqlDatabaseServersList}

Severity	Status	Audit Event
Critical	Failure	No

AzureSqlManagedInstanceServerDeleted

One or more Rubrik managed Azure SQL Managed Instances are missing from Azure subscription ${azureSubscriptionDisplayName}. Missing Azure SQL Managed Instances: ${missingSqlManagedInstanceServersList}

Severity	Status	Audit Event
Critical	Failure	No

AzureSqlSnapshotsMissing

One or more Rubrik managed snapshots are missing from Azure subscription ${azureSubscriptionDisplayName}. Total ${missingSqlDatabaseDbSnapshotCount} Azure Sql Database and ${missingSqlManagedInstanceDbSnapshotCount} Azure Sql Managed Database snapshots are missing.

Severity	Status	Audit Event
Critical	Failure	No

ccprovision

---

ClusterCreateFailed

${message}

Severity	Status	Audit Event
Critical	Failure	No

ClusterCreateRunning

${message}

Severity	Status	Audit Event
Info	TaskSuccess	No

ClusterCreateSuccess

${message}

Severity	Status	Audit Event
Info	Success	No

ClusterCreateWarning

${message}

Severity	Status	Audit Event
Warning	Success	No

cloudnative

---

AwsRdsManualSnapshotQuotaBreach

One or more regions from the AWS account, ${awsAccountDisplayName},  protected by Rubrik, may have the following issues: manual snapshot  quota limit is about to be breached, or you have used 75%% of the quota.  Usages in affected regions are: ${quotaUsage}.

Severity	Status	Audit Event
Warning	Failure	No

AwsRdsSnapshotsMissing

One or more RDS databases from the AWS account ${awsAccountDisplayName}  protected by Rubrik may have the following issues: Number of missing  RDS snapshots: ${missingRdsInstanceSnapshotCount}. Number of RDS  databases with modified log retention values:  ${missingRdsInstancePitrCount}.

Severity	Status	Audit Event
Critical	Failure	No

CloudNativeIndexSnapshotsDebugModeJobCanceled

Canceled debug-mode index run of the snapshot taken on ${snapshotTimeDisplay} of the ${snappableDisplay}.

Severity	Status	Audit Event
Info	Canceled	No

CloudNativeIndexSnapshotsDebugModeJobCanceling

Canceling debug-mode index run of the snapshot taken on ${snapshotTimeDisplay} of the ${snappableDisplay}.

Severity	Status	Audit Event
Info	Canceling	No

CloudNativeIndexSnapshotsDebugModeJobFailed

Failed in debug-mode index run of the snapshot taken on ${snapshotTimeDisplay} of the ${snappableDisplay}. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	No

CloudNativeIndexSnapshotsDebugModeJobQueued

Queued debug-mode index run of the snapshot taken on ${snapshotTimeDisplay} of the ${snappableDisplay}. The job will not index the snapshot.

Severity	Status	Audit Event
Info	Queued	No

CloudNativeIndexSnapshotsDebugModeJobStarted

Started debug-mode index run of the snapshot taken on ${snapshotTimeDisplay} of the ${snappableDisplay}. The job will not index the snapshot.

Severity	Status	Audit Event
Info	Success	No

CloudNativeIndexSnapshotsDebugModeJobSucceeded

Successfully completed debug-mode index run of the snapshot taken on ${snapshotTimeDisplay} of the ${snappableDisplay}. The snapshot was not indexed, since the job was run in the debug mode.

Severity	Status	Audit Event
Info	Success	No

GcpSnapshotsMissing

One or more rubrik managed snapshots are missing from GCP project ${gcpProjectDisplayName}. Total ${missingInstanceSnapshotCount} instance snapshots and ${missingDiskSnapshotCount} disk snapshots are missing.

Severity	Status	Audit Event
Critical	Failure	No

cluster

---

ClusterSyncJobsDelayed

Cluster ${clusterName} is experiencing the following delays in syncing data with Rubrik Cloud: \n\n${delayedJobsMessage}\n\nPlease open a support tunnel to the cluster and contact Rubrik Support for further assistance.

Severity	Status	Audit Event
Critical	Failure	No

ClusterUnreachable

Cluster ${clusterName} is unreachable

Severity	Status	Audit Event
Critical	Failure	No

exocompute

---

ClusterVerificationTaskFailed

Verification failed for the customer managed cluster ${clusterDisplayName}. Reason: ${reason}.

Severity	Status	Audit Event
Warning	TaskFailure	No

ClusterVerificationTaskStarted

Verifying the customer managed cluster ${clusterDisplayName}.

Severity	Status	Audit Event
Info	Running	No

ClusterVerificationTaskSucceeded

Successfully verified the customer managed cluster ${clusterDisplayName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

ExoclusterReachingAzureQuotaLimit

${eventMsg}

Severity	Status	Audit Event
Warning	Failure	No

ExoclusterReachingAzureSubnetLimit

The size of the subnet ${subnet} is limiting the scaling of the AKS. Recommended minimum subnet size: ${requiredBandwidth}

Severity	Status	Audit Event
Warning	Failure	No

ExoclusterUpgradeCanceled

Canceled upgrade ${exoclusterType} cluster ${exoclusterName}.

Severity	Status	Audit Event
Info	Canceled	No

ExoclusterUpgradeCanceling

Canceling upgrade of ${exoclusterType} cluster ${exoclusterName}.

Severity	Status	Audit Event
Info	Canceling	No

ExoclusterUpgradeFailed

Failed to upgrade ${exoclusterType} cluster ${exoclusterName} to version ${version}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

ExoclusterUpgradeNotEnoughResource

Not enough resources to upgrade ${exoclusterType} cluster ${exoclusterName} to version ${version}: ${quotaMsg}. More info on https://docs.microsoft.com/en-us/azure/aks/upgrade-cluster.

Severity	Status	Audit Event
Critical	Failure	No

ExoclusterUpgradeStarted

Upgrading ${exoclusterType} cluster ${exoclusterName}.

Severity	Status	Audit Event
Info	Running	No

ExoclusterUpgradeSucceeded

Successfully upgraded ${exoclusterType} cluster ${exoclusterName} to version ${version}.

Severity	Status	Audit Event
Info	Success	No

ExocomputeAwsSetupJobCanceled

Canceled setup of the EKS cluster in the ${awsAccountDisplayName} AWS account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	Canceled	No

ExocomputeAwsSetupJobCanceling

Canceling setup of the EKS cluster in the ${awsAccountDisplayName} AWS account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	Canceling	No

ExocomputeAwsSetupJobFailed

Failed to setup EKS cluster in the ${awsAccountDisplayName} AWS account in the ${regionDisplayName} region. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

ExocomputeAwsSetupJobStarted

Started setup of the EKS cluster in the ${awsAccountDisplayName} AWS account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	TaskSuccess	No

ExocomputeAwsSetupJobSucceeded

Successfully setup EKS cluster in the ${awsAccountDisplayName} AWS account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	Success	No

ExocomputeAwsTeardownJobCanceled

Canceled termination of the ${eksClusterDisplayName} EKS cluster in the ${awsAccountDisplayName} AWS account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	Canceled	No

ExocomputeAwsTeardownJobCanceling

Canceling termination of the ${eksClusterDisplayName} EKS cluster in the ${awsAccountDisplayName} AWS account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	Canceling	No

ExocomputeAwsTeardownJobFailed

Failed to terminate the ${eksClusterDisplayName} EKS cluster in the ${awsAccountDisplayName} AWS account in the ${regionDisplayName} region. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

ExocomputeAwsTeardownJobStarted

Terminating the ${eksClusterDisplayName} EKS cluster in the ${awsAccountDisplayName} AWS account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	TaskSuccess	No

ExocomputeAwsTeardownJobSucceeded

Successfully terminated the ${eksClusterDisplayName} EKS cluster in the ${awsAccountDisplayName} AWS account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	Success	No

ExocomputeAzureSetupJobCanceled

Canceled set up of the Azure Kubernetes Cluster in the resource group ${resourceGroupName} in the region ${azureRegionDisplayName} of the Azure subscription ${subscriptionDisplayName}.

Severity	Status	Audit Event
Info	Canceled	No

ExocomputeAzureSetupJobCanceling

Canceling set up of the Azure Kubernetes Cluster in the resource group ${resourceGroupName} in the region ${azureRegionDisplayName} of the Azure subscription ${subscriptionDisplayName}.

Severity	Status	Audit Event
Info	Canceling	No

ExocomputeAzureSetupJobFailed

Failed to set up the Azure Kubernetes Cluster in the resource group ${resourceGroupName} in the region ${azureRegionDisplayName} of the Azure subscription ${subscriptionDisplayName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

ExocomputeAzureSetupJobStarted

Started set up of the Azure Kubernetes Cluster in the resource group ${resourceGroupName} in the region ${azureRegionDisplayName} of the Azure subscription ${subscriptionDisplayName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

ExocomputeAzureSetupJobSucceeded

Successfully set up the Azure Kubernetes Cluster ${aksClusterDisplayName} in the resource group ${resourceGroupName} in the region ${azureRegionDisplayName} of the Azure subscription ${subscriptionDisplayName}.

Severity	Status	Audit Event
Info	Success	No

ExocomputeAzureTeardownJobCanceled

Canceled termination of the Azure Kubernetes Cluster ${aksClusterDisplayName} in the resource group ${resourceGroupName} in the region ${regionName} of the Azure subscription ${subscriptionName}.

Severity	Status	Audit Event
Info	Canceled	No

ExocomputeAzureTeardownJobCanceling

Canceling termination of the Azure Kubernetes Cluster ${aksClusterDisplayName} in the resource group ${resourceGroupName} in the region ${regionName} of the Azure subscription ${subscriptionName}.

Severity	Status	Audit Event
Info	Canceling	No

ExocomputeAzureTeardownJobFailed

Failed to terminate the Azure Kubernetes Cluster ${aksClusterDisplayName} in the resource group ${resourceGroupName} in the region ${regionName} of the Azure subscription ${subscriptionName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

ExocomputeAzureTeardownJobStarted

Terminating the Azure Kubernetes Cluster ${aksClusterDisplayName} in the resource group ${resourceGroupName} in the region ${regionName} of the Azure subscription ${subscriptionName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

ExocomputeAzureTeardownJobSucceeded

Successfully terminated the Azure Kubernetes Cluster ${aksClusterDisplayName} in the resource group ${resourceGroupName} in the region ${regionName} of the Azure subscription ${subscriptionName}.

Severity	Status	Audit Event
Info	Success	No

ExocomputeCloudNativeReconcilerJobCanceled

Canceled verification and configuration of the customer managed cluster ${clusterDisplayName} in the ${cloudAccountDisplayName} ${cloudTypeDisplayName} account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	Canceled	No

ExocomputeCloudNativeReconcilerJobCanceling

Canceling verification and configuration of the customer managed cluster ${clusterDisplayName} in the ${cloudAccountDisplayName} ${cloudTypeDisplayName} account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	Canceling	No

ExocomputeCloudNativeReconcilerJobFailed

Failed to verify and configure the customer managed cluster ${clusterDisplayName} in the ${cloudAccountDisplayName} ${cloudTypeDisplayName} account in the ${regionDisplayName} region. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

ExocomputeCloudNativeReconcilerJobStarted

Started verification and configuration of the customer managed cluster  ${clusterDisplayName} in the ${cloudAccountDisplayName} ${cloudTypeDisplayName} account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	TaskSuccess	No

ExocomputeCloudNativeReconcilerJobSucceeded

Successfully verified and configured customer managed cluster  ${clusterDisplayName} in the ${cloudAccountDisplayName}  ${cloudTypeDisplayName} account in the ${regionDisplayName} region.

Severity	Status	Audit Event
Info	Success	No

ExocomputeCustomerKMSSaved

User ${userEmail} entered customer KMS details for organization (${orgId}). Validated and persisted for key ${keyName} in vault ${vaultName}.

Severity	Status	Audit Event
Info	Success	Yes

ExocomputeResourceProvideRegistrationCompleted

Completed registration of Azure Resource Providers for subscription ${subscriptionID}.

Severity	Status	Audit Event
Info	Success	No

ExocomputeResourceProvideRegistrationFailed

Failed during registration of Azure Resource Providers for subscription ${subscriptionID}.

Severity	Status	Audit Event
Warning	Failure	No

ExocomputeResourceProvideRegistrationStarted

Started registration of Azure Resource Providers for subscription ${subscriptionID}.

Severity	Status	Audit Event
Info	Running	No

HealthCheckTaskFailed

Failed health check for the Kubernetes cluster. Reason: ${reason}.

Severity	Status	Audit Event
Warning	TaskFailure	No

HealthCheckTaskFailedForPoweredOffCluster

The powered-off AKS cluster, ${clusterName}, in resource group, ${rgName},  within Azure subscription, ${subscriptionID} failed the health check.  You can either start the AKS cluster to avoid data protection compliance  issues or delete the M365 subscription if you want to power down the  AKS cluster permanently.

Severity	Status	Audit Event
Warning	TaskFailure	No

HealthCheckTaskStarted

Checking health of the Kubernetes Cluster.

Severity	Status	Audit Event
Info	Running	No

HealthCheckTaskSucceeded

Successfully completed health check for the Kubernetes Cluster.

Severity	Status	Audit Event
Info	TaskSuccess	No

LaunchAKSClusterTaskFailed

Failed to launch the Azure Kubernetes Cluster in the resource group ${resourceGroupDisplayName} in the region ${azureRegionDisplayName} of the Azure subscription ${subscriptionDisplayName}.

Severity	Status	Audit Event
Warning	TaskFailure	No

LaunchAKSClusterTaskStarted

Launching the Azure Kubernetes Cluster in the resource group ${resourceGroupDisplayName} in the region ${azureRegionDisplayName} of the Azure subscription ${subscriptionDisplayName}.

Severity	Status	Audit Event
Info	Running	No

LaunchAKSClusterTaskSucceeded

Successfully launched the Azure Kubernetes Cluster ${aksClusterDisplayName} in the resource group ${resourceGroupDisplayName} in the region ${azureRegionDisplayName} of the Azure subscription ${subscriptionDisplayName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

LaunchEKSClusterTaskFailed

Failed to launch the ${eksClusterDisplayName} EKS cluster.

Severity	Status	Audit Event
Warning	TaskFailure	No

LaunchEKSClusterTaskStarted

Launching the ${eksClusterDisplayName} EKS cluster.

Severity	Status	Audit Event
Info	Running	No

LaunchEKSClusterTaskSucceeded

Successfully launched the ${eksClusterDisplayName} EKS cluster.

Severity	Status	Audit Event
Info	TaskSuccess	No

LaunchWorkerNodesTaskFailed

Failed to launch worker nodes in the ${eksClusterDisplayName} EKS cluster.

Severity	Status	Audit Event
Warning	TaskFailure	No

LaunchWorkerNodesTaskStarted

Launching worker nodes in the ${eksClusterDisplayName} EKS cluster.

Severity	Status	Audit Event
Info	Running	No

LaunchWorkerNodesTaskSucceeded

Launched worker nodes in the ${eksClusterDisplayName} EKS cluster.

Severity	Status	Audit Event
Info	TaskSuccess	No

O365CleanStaleResources

Please delete following stale resource from Azure Portal: ${resources}.

Severity	Status	Audit Event
Warning	Failure	No

O365SetupExocomputeFailed

${userID} failed to deploy Rubrik Office 365 protection software in ${exocomputeName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

O365SetupExocomputeFailed

Failed to deploy Rubrik Office 365 protection software in ${exocomputeName}: ${reason} (Error ID: ${errorID})

Severity	Status	Audit Event
Critical	Failure	No

O365SetupExocomputeStarted

${userID} started deploying Rubrik Office 365 protection software in ${exocomputeName}.

Severity	Status	Audit Event
Info	Success	Yes

O365SetupExocomputeStarted

Deploying Rubrik Office 365 protection software in ${exocomputeName}.

Severity	Status	Audit Event
Info	Running	No

O365SetupExocomputeSucceeded

Successfully deployed Rubrik Office 365 protection software in ${exocomputeName}.

Severity	Status	Audit Event
Info	Success	No

O365SetupResourceStarted

Setting up ${resource} in ${exocomputeName}.

Severity	Status	Audit Event
Info	Running	No

O365SetupResourceSucceeded

Successfully set up ${resource} in ${exocomputeName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

SetupClusterTaskFailed

Failed to configure the customer managed cluster ${clusterDisplayName}. Reason: ${reason}.

Severity	Status	Audit Event
Warning	TaskFailure	No

SetupClusterTaskStarted

Configuring the customer managed cluster ${clusterDisplayName}.

Severity	Status	Audit Event
Info	Running	No

SetupClusterTaskSucceeded

Successfully configured the customer managed cluster ${clusterDisplayName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

SetupEKSClusterTaskFailed

Failed to configure the ${eksClusterDisplayName} EKS cluster.

Severity	Status	Audit Event
Warning	TaskFailure	No

SetupEKSClusterTaskStarted

Configuring the ${eksClusterDisplayName} EKS cluster.

Severity	Status	Audit Event
Info	Running	No

SetupEKSClusterTaskSucceeded

Successfully configured the ${eksClusterDisplayName} EKS cluster.

Severity	Status	Audit Event
Info	TaskSuccess	No

kms_key_vault

---

KmsKeyVaultHealthCheckFailure

Connectivity health check failed for KMS ${kmsName} of type ${kmsType}.

Severity	Status	Audit Event
Critical	Failure	No

korg

---

CanaryFailed

Canary job failed for object ${object}. Reason: ${reason}.

Severity	Status	Audit Event
Warning	Failure	No

CanaryFinished

Canary job finished for object ${object}.

Severity	Status	Audit Event
Info	Success	No

CanaryStarted

Canary job started for object ${object}.

Severity	Status	Audit Event
Info	Running	No

JobCanceled

Job instance ${jobInstanceID} canceled.

Severity	Status	Audit Event
Info	Canceled	No

JobCancellationIssued

Cancellation request issued for job instance ${jobInstanceID}.

Severity	Status	Audit Event
Info	Canceling	No

JobCancellationIssuedByUser

Cancellation request received for job instance ${jobInstanceID} by user ${user}.

Severity	Status	Audit Event
Info	TaskSuccess	No

NonTerminalSeriesFailureRetry

The failed job will be retried automatically.

Severity	Status	Audit Event
Info	TaskSuccess	No

o365

---

InsufficientO365AppsOfType

The number of ${snappableType} apps (${appCount}) authenticated for ${orgName} is not sufficient to meet the configured SLAs. We recommend increasing the number of apps to ${recommendedAppCount}. Add ${snappableType} apps via the Manage Enterprise Apps button on the Microsoft 365 inventory page.

Severity	Status	Audit Event
Warning	Failure	No

M365BackupStorageSyncCanceled

Canceled backup storage sync for Microsoft 365 subscription ${orgName}.

Severity	Status	Audit Event
Info	Canceled	No

M365BackupStorageSyncFailed

Failed to complete backup storage sync for Microsoft 365 subscription  ${orgName}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

M365BackupStorageSyncStarted

Started backup storage sync for Microsoft 365 subscription ${orgName}

Severity	Status	Audit Event
Info	TaskSuccess	No

M365BackupStorageSyncStateTransitionStats

${count} object(s) state changed from ${fromState} to ${toState}

Severity	Status	Audit Event
Info	TaskSuccess	No

M365BackupStorageSyncSucceeded

Completed backup storage sync for Microsoft 365 subscription ${orgName}

Severity	Status	Audit Event
Info	Success	No

O365DeleteOrgFailed

Failed to delete Microsoft 365 Subscription ${orgName}: ${reason} (Error ID: ${errorID}). For more information on this error please visit https://support.rubrik.com/articles/How_To/000002821

Severity	Status	Audit Event
Critical	Failure	No

O365DeleteOrgStarted

Started deletion of O365 Subscription ${orgName}

Severity	Status	Audit Event
Info	Running	No

O365DeleteOrgSucceeded

Successfully deleted Microsoft 365 Subscription ${orgName}

Severity	Status	Audit Event
Info	Success	No

O365DeleteOrgTaskFailed

Failed to delete Microsoft 365 Subscription ${orgName}. Retrying. Reason: ${reason}

Severity	Status	Audit Event
Warning	TaskFailure	No

O365RefreshOrgAddedDocLibStats

Discovered ${numAdded} new document libraries

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgAddedSharePointListStats

Discovered ${numAdded} new sharepoint lists

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgAddedSiteCollectionStats

Discovered ${numAdded} new site collections(s)

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgAddedSiteStats

Discovered ${numAdded} new site(s)

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgAddedTeamAndChannelStats

Discovered ${numTeamsAdded} new team(s) and ${numChannelsAdded} new channel(s)

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgAddedUserStats

Discovered ${numAdded} new user(s)

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgArchivedTeamAndChannelStats

Archived ${numTeamsArchived} team(s) and ${numChannelsArchived} channel(s)

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgCanceled

Canceled ${maintenanceType} metadata refresh for subscription ${orgName}

Severity	Status	Audit Event
Info	Canceled	No

O365RefreshOrgNewRegionsStats

Added new M365 regions (${newRegions}) to (${existingRegions}).

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgRemovedSharePointObjectStats

Removed ${numRemoved} SharePoint object(s).

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgRemovedUserStats

Removed ${numRemoved} user(s): ${removedUserList}

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgStarted

Started ${maintenanceType} metadata refresh for subscription ${orgName}

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgSucceeded

Completed ${maintenanceType} metadata refresh for subscription ${orgName}

Severity	Status	Audit Event
Info	Success	No

O365RefreshOrgUnverifiedUserStats

Unable to verify mailbox access for ${numUnverified} user(s): ${unverifiedUserList}

Severity	Status	Audit Event
Warning	TaskSuccess	No

O365RefreshOrgUpdatedDocLibStats

Updated metadata for ${numUpdated} document libraries

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgUpdatedSharePointListStats

Updated metadata for ${numUpdated} sharepoint lists

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgUpdatedSiteCollectionStats

Updated metadata for ${numUpdated} siteCollections(s)

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgUpdatedSiteStats

Updated metadata for ${numUpdated} site(s)

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgUpdatedTeamAndChannelStats

Updated metadata for ${numTeamsUpdated} team(s) and ${numChannelsUpdated} channel(s)

Severity	Status	Audit Event
Info	TaskSuccess	No

O365RefreshOrgUpdatedUserStats

Updated metadata for ${numUpdated} user(s)

Severity	Status	Audit Event
Info	TaskSuccess	No

ProtectedMailboxLimitBreach

We're glad that our protection is helping! We're now protecting more mailboxes than your current licenses allow. We are protecting ${total_protected_licensed_mailbox} licensed mailboxes but the number allowed by your current licenses is ${allowed_protected_licensed_mailbox_limit}. We are protecting ${total_protected_unlicensed_mailbox} shared mailboxes but the number allowed by your current licenses is ${allowed_protected_unlicensed_mailbox_limit}. No need to worry though, we'll keep protecting the excess mailboxes for the next 30 days. During that time please reach out to the Rubrik Sales team to purchase additional licenses, or please remove ${overage_count} mailboxes. Please refer to ${learn_more_link} for more details. Thanks for being a great customer!

Severity	Status	Audit Event
Warning	Success	No

ProtectedOneDriveLimitBreach

We're glad that our protection is helping! We're now protecting more OneDrives than your current licenses allow. We are protecting ${total_protected_onedrive} OneDrives but the number allowed by your current licenses is ${allowed_protected_onedrive_limit}. No need to worry though, we'll keep protecting the excess OneDrives for the next 30 days. During that time please reach out to the Rubrik Sales team to purchase additional licenses, or please remove ${overage} mailboxes. Please refer to ${learn_more_link} for more details. Thanks for being a great customer!

Severity	Status	Audit Event
Warning	Success	No

RefreshO365OrgFailed

Failed ${maintenanceType} metadata refresh of subscription ${orgName}: ${reason} (Error ID: ${errorID}). For more information on this error please visit https://support.rubrik.com/articles/How_To/000002821

Severity	Status	Audit Event
Warning	Failure	No

polaris_disaster_recovery

---

PolarisComponentRecoveryFailure

Recovery of ${component} failed.

Severity	Status	Audit Event
Warning	Failure	No

PolarisComponentRecoveryStarted

Recovery of ${component} has begun.

Severity	Status	Audit Event
Info	TaskSuccess	No

PolarisComponentRecoverySuccess

Recovery of ${component} has completed successfully.

Severity	Status	Audit Event
Info	Success	No

PolarisDisasterRecoveryFailure

Disaster recovery failed.

Severity	Status	Audit Event
Critical	Failure	No

PolarisDisasterRecoveryStarted

Beginning disaster recovery.

Severity	Status	Audit Event
Info	TaskSuccess	No

PolarisDisasterRecoverySuccess

Disaster recovery has completed successfully.

Severity	Status	Audit Event
Info	Success	No

PolarisServiceStartBeginning

Returning services to running state.

Severity	Status	Audit Event
Info	TaskSuccess	No

PolarisServiceStartFailure

Failed to bring up services. Please run `cluster disaster_recovery revert` from the Admin CLI.

Severity	Status	Audit Event
Critical	Failure	No

PolarisServiceStartSuccess

Services successfully returned to running state.

Severity	Status	Audit Event
Info	Success	No

rcv

---

RcvAccessRemovedNotification

Access to your Rubrik Cloud Vault (RCV) locations for the ${tier}  tier in ${bundle} with ${redundancy} redundancy was removed on  ${removeAccessDate}. If you don't renew your license, all backups in  these locations will be deleted on ${deleteDataDate}.  To renew your RCV license  and prevent the deletion of your backups, contact your Rubrik account  representative or email sales@rubrik.com.

Severity	Status	Audit Event
Warning	Success	No

RcvConsumptionNotification

Your Rubrik Cloud Vault (RCV) locations for the  ${tier} tier in ${bundle} with ${redundancy} redundancy have been  paused. As a result, no new backups can be uploaded. However, you can  still access previously uploaded backups in these locations. Uploaded  backups will expire based on the retention period defined in their  SLA Domains.  To purchase additional RCV capacity, contact  your Rubrik account representative or email sales@rubrik.com.

Severity	Status	Audit Event
Warning	Success	No

RcvDataDeletionNotification

Your backups in Rubrik Cloud Vault (RCV) locations for the ${tier}  tier in ${bundle} with ${redundancy} redundancy were deleted on  ${deleteDataDate}.  Your RCV Locations using RCV  ${tier} tier in ${bundle} regions have been deleted.

Severity	Status	Audit Event
Warning	Success	No

RcvExpirationNotification

Your Rubrik Cloud Vault (RCV) locations for the  ${tier} tier in ${bundle} with ${redundancy} redundancy were paused. As  a result, no new backups will be uploaded. However, you can still  access previously uploaded backups in these locations. Uploaded backups  will expire based on the retention period defined in their SLA  Domains. If you do not renew your license, your access to these  locations will be removed on ${removeAccessDate}, and all backups  in these locations will be deleted on ${deleteDataDate}.  To renew your RCV  license and prevent the deletion of your backups, contact your Rubrik  account representative or email sales@rubrik.com.

Severity	Status	Audit Event
Warning	Success	No

RcvForecastedConsumptionNotification

Based on your past and current consumption of  Rubrik Cloud Vault (RCV) ${tier} tier in ${bundle} regions,  we have forecasted that your consumption will exceed your  purchased entitlement on ${forecastCapacityExceedDate}.  When you exceed your license, no new backups will be uploaded  to RCV locations in ${tier} tier for ${bundle} regions  but you’ll still be able to access previously uploaded backups  in these locations. Uploaded backups will expire according to the  retention period defined in their SLA Domains.  To purchase additional Rubrik Cloud Vault (RCV) capacity, contact  your Rubrik account representative or email sales@rubrik.com.

Severity	Status	Audit Event
Warning	Success	No

RCVPartialExpiryNotification

Capacity Expiring: ${expiredSize} TB  Expiration Date: ${expiryDate}  Capacity Not Expiring: ${remainingSize} TB  If you exceed your remaining license of ${remainingSize} TB, the  Rubrik Cloud Vault locations for ${tier} tier in regions that belong to  ${bundle} storage bundle with ${redundancy} redundancy will be paused.  As a result, no new backups can be uploaded but you will still be able  to access previously uploaded backups in these locations. Uploaded  backups will expire according to the retention period defined in their  SLA Domains. To prevent your backups from being paused, contact your  Rubrik account representative or email sales@rubrik.com to purchase  additional Rubrik Cloud Vault capacity.

Severity	Status	Audit Event
Warning	Success	No

RcvPercentageConsumptionNotification

Once you have used 100 percent of your licensed capacity, the  Rubrik Cloud Vault (RCV) locations for ${tier} tier in ${bundle} with  ${redundancy} redundancy will be paused. As a result, no new backups  can be uploaded. However, you can still access previously  uploaded backups in these locations. Uploaded backups will expire  based on retention period defined in their SLA Domains.  To prevent your backups from being paused, contact your Rubrik account  representative or email sales@rubrik.com to purchase additional  RCV capacity.

Severity	Status	Audit Event
Warning	Success	No

RcvPreliminaryExpirationNotification

Your Rubrik Cloud Vault (RCV) locations for the  ${tier} tier in ${bundle}  with ${redundancy} redundancy will be paused on ${expiryDate}. As a  result, no new backups will be uploaded. However, you can still  access previously uploaded backups in these locations. Uploaded backups  will expire based on the retention period defined in their SLA  Domains. If you do not renew your license, your access to these  locations will be removed on ${removeAccessDate}, and all backups  in these locations will be deleted on ${deleteDataDate}.

Severity	Status	Audit Event
Warning	Success	No

snapshot

---

SnapshotOutOfCompliance

The following snappable is out of SLA compliance due to missed local snapshot(s): ${snappableName}

Severity	Status	Audit Event
Critical	Failure	No

support_user_access

---

SupportUserAccessDisabled

${accessRevokerName} revoked read-only access to view RSC account as ${impersonatedUserName} from Rubrik support staff.

Severity	Status	Audit Event
Info	Success	No

SupportUserAccessDisabled

${accessRevokerName} revoked read-only access to view RSC account as ${impersonatedUserName} from Rubrik support staff.

Severity	Status	Audit Event
Info	Success	Yes

SupportUserAccessEnabled

${accessProviderName} granted read-only access to view RSC account as ${impersonatedUserName} to Rubrik support staff.

Severity	Status	Audit Event
Info	Success	Yes

SupportUserAccessEnabled

${accessProviderUserName} granted read-only access to Rubrik support staff for support ticket ${ticketId}.  Rubrik support staff will have read-only view as ${impersonatedUserName} from ${startTime} till ${endTime}.

Severity	Status	Audit Event
Info	Success	No

SupportUserAccessExpired

Access provided to Rubrik Support Staff by ${accessProviderUserName} to investigate ticket ${ticketId} has been expired

Severity	Status	Audit Event
Info	Success	No

SupportUserAccessModified

${accessModifierName} updated Rubrik support staff’s read-only access timings to RSC account  as ${impersonatedUserName} from ${previousDuration} hours to ${newDuration} hours.

Severity	Status	Audit Event
Info	Success	No

SupportUserAccessModified

${accessModifierName} updated Rubrik support staff’s read-only access timings to RSC account  as ${impersonatedUserName} from ${previousDuration} hours to ${newDuration} hours.

Severity	Status	Audit Event
Info	Success	Yes

SupportUserLoggedIn

Rubrik support staff logged in as ${impersonatedUserName}.

Severity	Status	Audit Event
Info	Success	Yes

SupportUserLoggedOut

Rubrik support staff viewing RSC account as ${impersonatedUserName} logged out.

Severity	Status	Audit Event
Info	Success	Yes

trident

---

CPUUtilizationWarning

CPU Utilization Warning. Reasons: ${reasons}.

Severity	Status	Audit Event
Warning	Failure	No

DiskUtilizationWarning

Disk Utilization Warning. Reasons: ${reasons}.

Severity	Status	Audit Event
Warning	Failure	No

MemoryUtilizationWarning

Memory Utilization Warning. Reasons: ${reasons}.

Severity	Status	Audit Event
Warning	Failure	No

PolarisHealthDegraded

Rubrik deployment status is ${node_status}. Reasons: ${reasons}.

Severity	Status	Audit Event
Critical	Failure	No

PolarisHealthOk

Rubrik deployment status is ${node_status}.

Severity	Status	Audit Event
Info	Success	No