Events — Ademco Galaxy Gxy Smart¶
What this adapter writes into the event log, grouped by what raises it. Values in braces are filled in when the event happens — the door, the person, the card.
Galaxy Gxy Smart Panel¶
| Message | Severity | Event id |
|---|---|---|
| Access denied at {thingName}: invalid credential ({credentialType}) | Warn | pq.event.access.denied.invalid |
| Access denied at {thingName}: unknown {credentialType} ({card_display}) | Warn | pq.event.access.denied.unknown |
| Access granted to {personName} at {thingName} using {credentialType} {plate} (Direction: {direction}) | Info | pq.event.access.granted |
| Power failure at | Critical | pq.event.energy.power.failure |
| Fuse failure detected at | Warn | pq.event.energy.power.fuse.failed |
| Fuse restored at | Info | pq.event.energy.power.fuse.restored |
| Power restored at | Info | pq.event.energy.power.restored |
| UPS activated at {thingName} (battery: {batteryPercentage}%) (runtime: {estimatedRuntime}) | Warn | pq.event.energy.ups.active |
| Tamper alarm at {thingName} ({tamperType}) | Critical | pq.event.intrusion.tamper |
| Tamper alarm cleared at | Info | pq.event.intrusion.tamper.cleared |
| Test mode completed at {thingName} by {personName} | Info | pq.event.intrusion.testing.completed |
| Test mode started at {thingName} by {personName} | Info | pq.event.intrusion.testing.started |
| Admin mode entered at {thingName} by {personName} | Warn | pq.event.security.admin.entered |
| Admin mode exited at {thingName} by {personName} | Info | pq.event.security.admin.exited |
| Audit log almost full on | Warn | pq.event.security.audit.capacity.near_full |
| Periodic test report generated by | Info | pq.event.security.audit.test_report |
| Repeated invalid code entries detected at | Warn | pq.event.security.code.invalid.repeated |
| Remote access allowed on | Warn | pq.event.security.remote_access.allowed |
| Remote access denied on | Warn | pq.event.security.remote_access.denied |
| Remote access session ended on | Info | pq.event.security.remote_access.ended |
| Configuration changed at {thingName} by {personName} - {changeDescription} | Info | pq.event.system.configuration.changed |
| System restart completed at {thingName} (uptime: {uptimeDuration}) | Info | pq.event.system.restart.completed |
| Critical battery level at {thingName} ({batteryPercentage}%) (est. {estimatedRemaining} remaining) | Critical | pq.event.technical.battery.critical |
| Battery fault at {thingName} (voltage: {batteryVoltage}V) ({batteryPercentage}%) | Warn | pq.event.technical.battery.fault |
| Low battery at {thingName} ({batteryPercentage}%) | Warn | pq.event.technical.battery.low |
| Battery condition normal at | Info | pq.event.technical.battery.normal |
| Communication degraded with {thingName} (signal: {signalStrength}%) (loss: {packetLoss}%) | Warn | pq.event.technical.communication.degraded |
| Communication overload on | Error | pq.event.technical.communication.overload |
| Communication overload cleared on | Info | pq.event.technical.communication.overload.cleared |
| Communication restored with {thingName} (outage: {outageDuration}) | Info | pq.event.technical.communication.restored |
| Telephone reporting communication failed on | Error | pq.event.technical.communication.telephone.failed |
Partition¶
| Message | Severity | Event id |
|---|---|---|
| Intrusion alarm at | Critical | pq.event.intrusion.alarm |
| Alarm acknowledged at {thingName} by {personName} | Info | pq.event.intrusion.alarm.acknowledged |
| Alarm acknowledged remotely at {thingName} by {personName} | Info | pq.event.intrusion.alarm.acknowledged.remote |
| System armed by | Info | pq.event.intrusion.armed |
| System arming exit delay started remotely by | Info | pq.event.intrusion.armed.exit_delay.remote |
| System forced armed by | Warn | pq.event.intrusion.armed.forced |
| System armed with bypassed zones by | Warn | pq.event.intrusion.armed.forced.bypass |
| System forced armed remotely by | Warn | pq.event.intrusion.armed.forced.remote |
| System armed instantly by | Info | pq.event.intrusion.armed.instant |
| System partially armed by | Info | pq.event.intrusion.armed.partial |
| System partially armed remotely by | Info | pq.event.intrusion.armed.partial.remote |
| System armed in sleep mode by | Info | pq.event.intrusion.armed.partial.sleep |
| System armed remotely in sleep mode by | Info | pq.event.intrusion.armed.partial.sleep.remote |
| System armed in stay mode by | Info | pq.event.intrusion.armed.partial.stay |
| System armed remotely in stay mode by | Info | pq.event.intrusion.armed.partial.stay.remote |
| System armed remotely by | Info | pq.event.intrusion.armed.remote |
| System armed by schedule ({scheduleName}) | Info | pq.event.intrusion.armed.schedule |
| System arming denied to {personName} at {thingName} | Warn | pq.event.intrusion.arming.denied |
| System arming failed at {thingName} by {personName} | Warn | pq.event.intrusion.arming.failed |
| Auto-arming postponed at {thingName} by {personName} | Warn | pq.event.intrusion.arming.postponed |
| Scheduled auto-arming warning at | Warn | pq.event.intrusion.arming.warning.schedule |
| Zone {thingName} bypassed by {personName} | Info | pq.event.intrusion.bypassed |
| Zone {thingName} bypass cleared by {personName} | Info | pq.event.intrusion.bypassed.cleared |
| Intrusion condition cleared at {thingName} by {personName} | Info | pq.event.intrusion.cleared |
| System disarmed by | Info | pq.event.intrusion.disarmed |
| System disarmed during active alarm by | Warn | pq.event.intrusion.disarmed.alarm |
| System disarmed remotely during active alarm by | Warn | pq.event.intrusion.disarmed.alarm.remote |
| System partially disarmed at {thingName} by {personName} | Info | pq.event.intrusion.disarmed.partial |
| System disarmed remotely by | Info | pq.event.intrusion.disarmed.remote |
| System disarmed by schedule ({scheduleName}) | Info | pq.event.intrusion.disarmed.schedule |
| System disarming denied to {personName} at {thingName} | Warn | pq.event.intrusion.disarming.denied |
| System disarming failed at {thingName} by {personName} | Warn | pq.event.intrusion.disarming.failed |
| Duress alarm from {personName} at {thingName} | Critical | pq.event.intrusion.duress |
| Entry/exit delay timeout at | Warn | pq.event.intrusion.entry.timeout |
| Pre-alarm condition at | Warn | pq.event.intrusion.prealarm |
| Test mode completed at {thingName} by {personName} | Info | pq.event.intrusion.testing.completed |
| Test mode started at {thingName} by {personName} | Info | pq.event.intrusion.testing.started |
| Panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic |
| Panic alarm cleared at | Info | pq.event.safety.panic.cleared |
| Fire panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.fire |
| Medical panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.medical |
Zone¶
| Message | Severity | Event id |
|---|---|---|
| Fire alarm at {thingName} zone {zoneId} ({detectorType}) | Critical | pq.event.fire.alarm |
| Conditional fire alarm at {thingName} zone {zoneId} | Critical | pq.event.fire.alarm.conditional |
| General fire alarm at {thingName} zone {zoneId} | Critical | pq.event.fire.alarm.general |
| Section fire alarm at {thingName} zone {zoneId} | Critical | pq.event.fire.alarm.section |
| Fire condition cleared at | Info | pq.event.fire.cleared |
| Manual fire alarm activated at {thingName} by {personName} | Critical | pq.event.fire.manual |
| Fire pre-alarm at | Warn | pq.event.fire.prealarm |
| Smoke cleared at | Info | pq.event.fire.smoke.cleared |
| Smoke detected at {thingName} (level: {smokeLevel}) | Critical | pq.event.fire.smoke.detected |
| Water flow detected in suppression system at | Critical | pq.event.fire.suppression.flow |
| Fire test activation at | Info | pq.event.fire.test.activation |
| Fire test completed at {thingName} ({testType}) by {personName} | Info | pq.event.fire.test.completed |
| Fire test fault at {thingName} ({faultType}) | Warn | pq.event.fire.test.fault |
| Fire test passed at {thingName}, waiting for finish | Info | pq.event.fire.test.passed |
| Fire test started at {thingName} ({testType}) by {personName} | Info | pq.event.fire.test.started |
| Intrusion alarm at | Critical | pq.event.intrusion.alarm |
| Zone {thingName} bypassed by {personName} | Info | pq.event.intrusion.bypassed |
| Zone {thingName} bypass cleared by {personName} | Info | pq.event.intrusion.bypassed.cleared |
| Zone {thingName} bypass cleared remotely by {personName} | Info | pq.event.intrusion.bypassed.cleared.remote |
| Zone {thingName} bypassed remotely by {personName} | Info | pq.event.intrusion.bypassed.remote |
| Intrusion condition cleared at {thingName} by {personName} | Info | pq.event.intrusion.cleared |
| Contact closed at | Info | pq.event.intrusion.contact.closed |
| Contact open at | Warn | pq.event.intrusion.contact.open |
| Forced entry detected at | Critical | pq.event.intrusion.entry.forced |
| Motion cleared at | Info | pq.event.intrusion.motion.cleared |
| Motion detected at | Info | pq.event.intrusion.motion.detected |
| Pre-alarm condition at | Warn | pq.event.intrusion.prealarm |
| Tamper alarm at {thingName} ({tamperType}) | Critical | pq.event.intrusion.tamper |
| Tamper alarm cleared at | Info | pq.event.intrusion.tamper.cleared |
| Test mode completed at {thingName} by {personName} | Info | pq.event.intrusion.testing.completed |
| Test mode started at {thingName} by {personName} | Info | pq.event.intrusion.testing.started |
| Panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic |
| Panic alarm cleared at | Info | pq.event.safety.panic.cleared |
| Medical panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.medical |
| Police/holdup panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.police |
| Periodic test report generated by | Info | pq.event.security.audit.test_report |
| Supervision fault at | Warn | pq.event.supervision.fault |
| Fault cleared at {thingName} ({faultType}) | Info | pq.event.technical.fault.cleared |
Output¶
| Message | Severity | Event id |
|---|---|---|
| Output activated at | Info | pq.event.control.activated |
| Output {thingName} activated remotely by {personName} | Info | pq.event.control.activated.remote |
| Output deactivated at | Info | pq.event.control.deactivated |
| Output {thingName} deactivated remotely by {personName} | Info | pq.event.control.deactivated.remote |
Card Reader¶
| Message | Severity | Event id |
|---|---|---|
| All credentials deleted from {thingName} by {personName} ({deletedCount} credentials) | Critical | pq.event.access.credential.deleted.all |
| Credential deleted from {thingName} for {personName} ({credentialType}) | Info | pq.event.access.credential.deleted.single |
| Duplicate credential detected at {thingName} for {personName} ({credentialType}) | Warn | pq.event.access.credential.enrollment.duplicate |
| Credential enrollment failed at {thingName} for {personName} | Warn | pq.event.access.credential.enrollment.failed |
| Credential enrolled for {personName} at {thingName} ({technology}) | Info | pq.event.access.credential.enrollment.succeeded |
| Credential use limit changed for {personName} at {thingName}: {remainingUses} uses remaining | Info | pq.event.access.credential.limit.usage.changed |
| Credential use limit exhausted for {personName} at {thingName} | Warn | pq.event.access.credential.limit.usage.exhausted |
| Access denied to {personName} at {thingName} (credential: {credentialType}) | Warn | pq.event.access.denied |
| Access denied to {personName} at {thingName}: antipassback violation | Warn | pq.event.access.denied.antipassback |
| Access denied at {thingName}: credential blocked {plate} ({personName}) - {blockReason} (Direction: {direction}) | Warn | pq.event.access.denied.blocked |
| Access denied at {thingName}: second person required | Warn | pq.event.access.denied.dual |
| Access denied at {thingName}: credential expired ({personName}) - expired {expiryDate} | Warn | pq.event.access.denied.expired |
| Access denied at {thingName}: biometric fraud detected ({credentialType}) | Critical | pq.event.access.denied.fraud |
| Access denied at {thingName}: incomplete multifactor sequence ({personName}) | Warn | pq.event.access.denied.incomplete |
| Access denied at {thingName}: interlock active | Warn | pq.event.access.denied.interlock |
| Access denied at {thingName}: invalid credential ({credentialType}) | Warn | pq.event.access.denied.invalid |
| Access denied at {thingName}: access point locked | Warn | pq.event.access.denied.locked |
| Access denied at {thingName}: occupancy limit reached | Warn | pq.event.access.denied.occupancy |
| Access denied at {thingName}: invalid PIN | Warn | pq.event.access.denied.pin |
| Access denied outside scheduled hours at {thingName} to {personName} (schedule: {scheduleName}) | Warn | pq.event.access.denied.schedule |
| Access denied at {thingName}: unknown {credentialType} ({card_display}) | Warn | pq.event.access.denied.unknown |
| Door {thingName} forced open | Critical | pq.event.access.door.forced |
| Door {thingName} held open | Warn | pq.event.access.door.held |
| Access granted to {personName} at {thingName} using {credentialType} {plate} (Direction: {direction}) | Info | pq.event.access.granted |
| Access granted despite antipassback violation to {personName} at {thingName} | Warn | pq.event.access.granted.antipassback |
| Reader {thingName} lockout cleared | Info | pq.event.access.reader.lockout.cleared |
| Reader {thingName} locked out after {failedAttempts} failed attempts for {lockoutDuration} | Warn | pq.event.access.reader.lockout.triggered |
| Duress alarm from {personName} at {thingName} | Critical | pq.event.intrusion.duress |
| Duress alarm cleared at | Info | pq.event.intrusion.duress.cleared |
Keypad¶
| Message | Severity | Event id |
|---|---|---|
| All credentials deleted from {thingName} by {personName} ({deletedCount} credentials) | Critical | pq.event.access.credential.deleted.all |
| Credential deleted from {thingName} for {personName} ({credentialType}) | Info | pq.event.access.credential.deleted.single |
| Duplicate credential detected at {thingName} for {personName} ({credentialType}) | Warn | pq.event.access.credential.enrollment.duplicate |
| Credential enrollment failed at {thingName} for {personName} | Warn | pq.event.access.credential.enrollment.failed |
| Credential enrolled for {personName} at {thingName} ({technology}) | Info | pq.event.access.credential.enrollment.succeeded |
| Credential use limit changed for {personName} at {thingName}: {remainingUses} uses remaining | Info | pq.event.access.credential.limit.usage.changed |
| Credential use limit exhausted for {personName} at {thingName} | Warn | pq.event.access.credential.limit.usage.exhausted |
| Access denied to {personName} at {thingName} (credential: {credentialType}) | Warn | pq.event.access.denied |
| Access denied to {personName} at {thingName}: antipassback violation | Warn | pq.event.access.denied.antipassback |
| Access denied at {thingName}: credential blocked {plate} ({personName}) - {blockReason} (Direction: {direction}) | Warn | pq.event.access.denied.blocked |
| Access denied at {thingName}: second person required | Warn | pq.event.access.denied.dual |
| Access denied at {thingName}: credential expired ({personName}) - expired {expiryDate} | Warn | pq.event.access.denied.expired |
| Access denied at {thingName}: biometric fraud detected ({credentialType}) | Critical | pq.event.access.denied.fraud |
| Access denied at {thingName}: incomplete multifactor sequence ({personName}) | Warn | pq.event.access.denied.incomplete |
| Access denied at {thingName}: interlock active | Warn | pq.event.access.denied.interlock |
| Access denied at {thingName}: invalid credential ({credentialType}) | Warn | pq.event.access.denied.invalid |
| Access denied at {thingName}: access point locked | Warn | pq.event.access.denied.locked |
| Access denied at {thingName}: occupancy limit reached | Warn | pq.event.access.denied.occupancy |
| Access denied at {thingName}: invalid PIN | Warn | pq.event.access.denied.pin |
| Access denied outside scheduled hours at {thingName} to {personName} (schedule: {scheduleName}) | Warn | pq.event.access.denied.schedule |
| Access denied at {thingName}: unknown {credentialType} ({card_display}) | Warn | pq.event.access.denied.unknown |
| Access granted to {personName} at {thingName} using {credentialType} {plate} (Direction: {direction}) | Info | pq.event.access.granted |
| Access granted despite antipassback violation to {personName} at {thingName} | Warn | pq.event.access.granted.antipassback |
| Reader {thingName} lockout cleared | Info | pq.event.access.reader.lockout.cleared |
| Reader {thingName} locked out after {failedAttempts} failed attempts for {lockoutDuration} | Warn | pq.event.access.reader.lockout.triggered |
| Duress alarm from {personName} at {thingName} | Critical | pq.event.intrusion.duress |
| Duress alarm cleared at | Info | pq.event.intrusion.duress.cleared |
Door Control Module¶
| Message | Severity | Event id |
|---|---|---|
| Power failure at | Critical | pq.event.energy.power.failure |
| Power restored at | Info | pq.event.energy.power.restored |
| UPS activated at {thingName} (battery: {batteryPercentage}%) (runtime: {estimatedRuntime}) | Warn | pq.event.energy.ups.active |
| Tamper alarm at {thingName} ({tamperType}) | Critical | pq.event.intrusion.tamper |
| Tamper alarm cleared at | Info | pq.event.intrusion.tamper.cleared |
| Critical battery level at {thingName} ({batteryPercentage}%) (est. {estimatedRemaining} remaining) | Critical | pq.event.technical.battery.critical |
| Battery fault at {thingName} (voltage: {batteryVoltage}V) ({batteryPercentage}%) | Warn | pq.event.technical.battery.fault |
| Low battery at {thingName} ({batteryPercentage}%) | Warn | pq.event.technical.battery.low |
| Battery condition normal at | Info | pq.event.technical.battery.normal |
| Communication lost with {thingName} (last seen: {lastSeenTimestamp}) | Error | pq.event.technical.communication.lost |
| Communication restored with {thingName} (outage: {outageDuration}) | Info | pq.event.technical.communication.restored |
DCM Reader¶
| Message | Severity | Event id |
|---|---|---|
| All credentials deleted from {thingName} by {personName} ({deletedCount} credentials) | Critical | pq.event.access.credential.deleted.all |
| Credential deleted from {thingName} for {personName} ({credentialType}) | Info | pq.event.access.credential.deleted.single |
| Duplicate credential detected at {thingName} for {personName} ({credentialType}) | Warn | pq.event.access.credential.enrollment.duplicate |
| Credential enrollment failed at {thingName} for {personName} | Warn | pq.event.access.credential.enrollment.failed |
| Credential enrolled for {personName} at {thingName} ({technology}) | Info | pq.event.access.credential.enrollment.succeeded |
| Credential use limit changed for {personName} at {thingName}: {remainingUses} uses remaining | Info | pq.event.access.credential.limit.usage.changed |
| Credential use limit exhausted for {personName} at {thingName} | Warn | pq.event.access.credential.limit.usage.exhausted |
| Access denied to {personName} at {thingName} (credential: {credentialType}) | Warn | pq.event.access.denied |
| Access denied to {personName} at {thingName}: antipassback violation | Warn | pq.event.access.denied.antipassback |
| Access denied at {thingName}: credential blocked {plate} ({personName}) - {blockReason} (Direction: {direction}) | Warn | pq.event.access.denied.blocked |
| Access denied at {thingName}: second person required | Warn | pq.event.access.denied.dual |
| Access denied at {thingName}: credential expired ({personName}) - expired {expiryDate} | Warn | pq.event.access.denied.expired |
| Access denied at {thingName}: biometric fraud detected ({credentialType}) | Critical | pq.event.access.denied.fraud |
| Access denied at {thingName}: incomplete multifactor sequence ({personName}) | Warn | pq.event.access.denied.incomplete |
| Access denied at {thingName}: interlock active | Warn | pq.event.access.denied.interlock |
| Access denied at {thingName}: invalid credential ({credentialType}) | Warn | pq.event.access.denied.invalid |
| Access denied at {thingName}: access point locked | Warn | pq.event.access.denied.locked |
| Access denied at {thingName}: occupancy limit reached | Warn | pq.event.access.denied.occupancy |
| Access denied at {thingName}: invalid PIN | Warn | pq.event.access.denied.pin |
| Access denied outside scheduled hours at {thingName} to {personName} (schedule: {scheduleName}) | Warn | pq.event.access.denied.schedule |
| Access denied at {thingName}: unknown {credentialType} ({card_display}) | Warn | pq.event.access.denied.unknown |
| Door {thingName} forced open | Critical | pq.event.access.door.forced |
| Door {thingName} held open | Warn | pq.event.access.door.held |
| Access granted to {personName} at {thingName} using {credentialType} {plate} (Direction: {direction}) | Info | pq.event.access.granted |
| Access granted despite antipassback violation to {personName} at {thingName} | Warn | pq.event.access.granted.antipassback |
| Reader {thingName} lockout cleared | Info | pq.event.access.reader.lockout.cleared |
| Reader {thingName} locked out after {failedAttempts} failed attempts for {lockoutDuration} | Warn | pq.event.access.reader.lockout.triggered |
| Duress alarm from {personName} at {thingName} | Critical | pq.event.intrusion.duress |
| Duress alarm cleared at | Info | pq.event.intrusion.duress.cleared |
Remote I/O Module¶
| Message | Severity | Event id |
|---|---|---|
| Power failure at | Critical | pq.event.energy.power.failure |
| Power restored at | Info | pq.event.energy.power.restored |
| UPS activated at {thingName} (battery: {batteryPercentage}%) (runtime: {estimatedRuntime}) | Warn | pq.event.energy.ups.active |
| Tamper alarm at {thingName} ({tamperType}) | Critical | pq.event.intrusion.tamper |
| Tamper alarm cleared at | Info | pq.event.intrusion.tamper.cleared |
| Critical battery level at {thingName} ({batteryPercentage}%) (est. {estimatedRemaining} remaining) | Critical | pq.event.technical.battery.critical |
| Battery fault at {thingName} (voltage: {batteryVoltage}V) ({batteryPercentage}%) | Warn | pq.event.technical.battery.fault |
| Low battery at {thingName} ({batteryPercentage}%) | Warn | pq.event.technical.battery.low |
| Battery condition normal at | Info | pq.event.technical.battery.normal |
| Communication lost with {thingName} (last seen: {lastSeenTimestamp}) | Error | pq.event.technical.communication.lost |
| Communication restored with {thingName} (outage: {outageDuration}) | Info | pq.event.technical.communication.restored |