The Event Feed tab lists all the interactions the device or Group has had with the Console. It displays each command taken on the device and the name of the person that initiated the command with a date and time stamp. You can access this event field under the device details.
In this article:
- Device Event Feed
- Group Event Feed
- Checking the Activity Feed
- Viewing a Device's Activity Feed
- Event Feed Glossary
Device Event Feed
You can access this event field under device details. Locate the device in Devices & Groups and then navigate to Event Feed.
To download the events, click on the Download button. A JSON file will download in your browser.
Group Event Feed
The Event Feed tab displays all the actions taken on the group, including details about each event. This can be useful for viewing the status of any queued commands for offline devices.
To look at the group's event feed, click on the View Details button of the group and navigate to Event Feed.
To download the events, click on the Download button. A JSON file will download in your browser.
Click the Info Event Feed to view more details about the device's event status.
These details are displayed on a slide-out from the right.
The Event Feed tab lists all the interactions the device has had with the Console. It displays each command taken on the device, the status, and the name of the person that initiated the command with a date and time stamp.
You can expand any command to view the breakdown of the command lifecycle. You can access this event field on the device detail screen under the Event feed tab.
The event feed for the group displays all the interactions for the devices in that group.
Checking the Activity Feed
Clicking the Activity Feed icon brings a context-sensitive slide-out from the right side of the screen.
If you are viewing a group, it lists the history of all commands fired by any user to the devices in the group.
Viewing a Device's Activity Feed
Click on the information icon to the far right of the screen to view the history of application installation and uninstall events performed on the device.
This Activity field includes information about timestamp, application name, application version, package name, application type, and status of the event (Success, In Progress, Failure, or Cancelled).
Event Feed Glossary
Here is a list of some of the most common events.
| Event | Explanation |
| ADD_EMM_ACCOUNT | A device was enrolled in EMM (after provisioning). |
| ADD_OVERRIDE_APN | An APN (access point name, such as a wi-fi network) was added or overrode. |
| CAPTURE_SCREENSHOT | A screenshot was captured during a Remote Viewer session. |
| CLEAR_APP_DATA | App data was cleared. |
| GEO_FENCE_EVENT | A geofence was added to or removed from the device. |
| INSTALL | An application was installed on the device. |
| LOCK | A screen lock occurred. Users usually lock their devices if they notice any suspicious activity. |
| NOTIFY_DEVICE | A message was broadcasted to a device. |
| NOTIFY_OTA | A notification for an OTA (over the air) update was sent to the device. |
| REBOOT | A device reboot occurred. |
| REMOVE_FROM_WHITELIST | An application was removed from the whitelist (allowlist). |
| REMOVE_WIFI_AP | A wi-fi access point was removed from the device. |
| REQUEST_BUGREPORT | A bug report or log was requested for the device. |
| REQUEST_DPCLOG | A request for a DPC log occurred. |
| RESET_LOCKSCREEN_PASSWORD | A device’s lock screen password was reset. |
| SET_APP_STATE | An app was enabled or disabled. |
| SET_BLUETOOTH_STATE | Bluetooth was enabled or disabled. |
| SET_BRIGHTNESS_SCALE | The screen’s brightness scale was set. |
| SET_DEVICE_LOCKDOWN_STATE | The device's lockdown was enabled or disabled. |
| SET_GPS_STATE | GPS was turned on or off for the device. |
| SET_KIOSK_APP | An app was set for Kiosk Mode (also known as pinning an app). |
| SET_NEW_POLICY | A new Compliance Policy was applied to the device. Templates only. |
| SET_ROTATION_STATE | The device’s rotation mode was set (landscape, portrait, etc.) |
| SET_SCREEN_OFF_TIMEOUT | A screen timeout was set for the device. |
| SET_STREAM_VOLUME | The device’s stream volume was set. |
| SET_TIMEZONE | A time zone was set for the device. |
| SET_WIDGET | A widget was enabled or disabled on the device. A widget on the device screen was shown or hidden from the screen. |
| SET_WIFI_STATE | Wi-Fi was turned on or off. |
| SHUTDOWN_EVENT | A user-initiated shutdown occurred or the device went into an unexpected shutdown. Note: System updates register as User Initiated Shutdowns, even if the user did not select the update. |
| SYNC_CONTENT | A content sync occurred. A file was transferred to the device. |
| UNINSTALL | An application was uninstalled on the device. |
| UPDATE_BLUEPRINT | The device’s Blueprint was updated. Blueprints only. |
| UPDATE_DEVICE_CONFIG | The device’s configurations were updated. |
| UPDATE_HEARTBEAT | A heartbeat ping occurred for the device. Users can check if Esper is communicating with the device by sending a heartbeat ping. |
| UPDATE_LATEST_DPC | An Esper Agent update occurred. |
| WIPE | A factory reset (device wipe) occurred. The device will no longer communicate with the Console until it is provisioned again. |