Events — Paradox EVO Intrusion Panel¶
What this adapter writes into the event log, grouped by what raises it. Values in braces are filled in when the event happens — the door, the person, the card.
ParadoxPanel¶
| Message | Severity | Event id |
|---|---|---|
| Sounder circuit fault at {thingName} ({faultType}) | Warn | pq.event.alarm.sounder.fault |
| Sounder circuit fault cleared at {thingName} ({faultType}) | Info | pq.event.alarm.sounder.fault.cleared |
| Power failure at | Critical | pq.event.energy.power.failure |
| Power restored at | Info | pq.event.energy.power.restored |
| UPS activated at {thingName} (battery: {batteryPercentage}%) (runtime: {estimatedRuntime}) | Warn | pq.event.energy.ups.active |
| Tamper alarm at {thingName} ({tamperType}) | Critical | pq.event.intrusion.tamper |
| Tamper alarm cleared at | Info | pq.event.intrusion.tamper.cleared |
| Admin mode entered at {thingName} by {personName} | Warn | pq.event.security.admin.entered |
| Admin mode exited at {thingName} by {personName} | Info | pq.event.security.admin.exited |
| Periodic test report generated by | Info | pq.event.security.audit.test_report |
| User command '{commandCode}' entered at {thingName} by {personName} | Info | pq.event.security.keypad.command |
| Remote access allowed on | Warn | pq.event.security.remote_access.allowed |
| Listen-in verification active on | Warn | pq.event.security.verification.listen_in |
| Supervision fault at | Warn | pq.event.supervision.fault |
| Configuration changed at {thingName} by {personName} - {changeDescription} | Info | pq.event.system.configuration.changed |
| Voice module missing on | Error | pq.event.system.device.module.missing.voice |
| System restart completed at {thingName} (uptime: {uptimeDuration}) | Info | pq.event.system.restart.completed |
| System time changed on {thingName} by {personName} | Info | pq.event.system.time.changed |
| Critical battery level at {thingName} ({batteryPercentage}%) (est. {estimatedRemaining} remaining) | Critical | pq.event.technical.battery.critical |
| Battery fault at {thingName} (voltage: {batteryVoltage}V) ({batteryPercentage}%) | Warn | pq.event.technical.battery.fault |
| Low battery at {thingName} ({batteryPercentage}%) | Warn | pq.event.technical.battery.low |
| Battery condition normal at | Info | pq.event.technical.battery.normal |
| Force answer triggered on | Warn | pq.event.technical.communication.callup.force_answer |
| Force hangup triggered on | Warn | pq.event.technical.communication.callup.force_hangup |
| User initiated callup on | Info | pq.event.technical.communication.callup.user_initiated |
| Communication lost with {thingName} (last seen: {lastSeenTimestamp}) | Error | pq.event.technical.communication.lost |
| Communication restored with {thingName} (outage: {outageDuration}) | Info | pq.event.technical.communication.restored |
| Voice reporting failed on | Error | pq.event.technical.communication.voice_reporting.failed |
| Fault cleared at {thingName} ({faultType}) | Info | pq.event.technical.fault.cleared |
| Hardware fault at {thingName}: {faultDescription} (code: {faultCode}) | Error | pq.event.technical.fault.hardware |
Partition¶
| Message | Severity | Event id |
|---|---|---|
| Intrusion alarm at | Critical | pq.event.intrusion.alarm |
| Alarm acknowledged at {thingName} by {personName} | Info | pq.event.intrusion.alarm.acknowledged |
| Alarm acknowledged remotely at {thingName} by {personName} | Info | pq.event.intrusion.alarm.acknowledged.remote |
| System armed by | Info | pq.event.intrusion.armed |
| System arming exit delay started remotely by | Info | pq.event.intrusion.armed.exit_delay.remote |
| System forced armed by | Warn | pq.event.intrusion.armed.forced |
| System armed with bypassed zones by | Warn | pq.event.intrusion.armed.forced.bypass |
| System forced armed remotely by | Warn | pq.event.intrusion.armed.forced.remote |
| System armed instantly by | Info | pq.event.intrusion.armed.instant |
| System partially armed by | Info | pq.event.intrusion.armed.partial |
| System partially armed remotely by | Info | pq.event.intrusion.armed.partial.remote |
| System armed in sleep mode by | Info | pq.event.intrusion.armed.partial.sleep |
| System armed remotely in sleep mode by | Info | pq.event.intrusion.armed.partial.sleep.remote |
| System armed in stay mode by | Info | pq.event.intrusion.armed.partial.stay |
| System armed remotely in stay mode by | Info | pq.event.intrusion.armed.partial.stay.remote |
| System armed remotely by | Info | pq.event.intrusion.armed.remote |
| System armed by schedule ({scheduleName}) | Info | pq.event.intrusion.armed.schedule |
| System armed earlier than schedule at {thingName} by {personName} | Warn | pq.event.intrusion.armed.schedule.early |
| System armed later than schedule at {thingName} by {personName} | Warn | pq.event.intrusion.armed.schedule.late |
| System arming denied to {personName} at {thingName} | Warn | pq.event.intrusion.arming.denied |
| System arming failed at {thingName} by {personName} | Warn | pq.event.intrusion.arming.failed |
| Scheduled auto-arming failed at | Warn | pq.event.intrusion.arming.failed.schedule |
| Intrusion condition cleared at {thingName} by {personName} | Info | pq.event.intrusion.cleared |
| System disarmed by | Info | pq.event.intrusion.disarmed |
| System disarmed during active alarm by | Warn | pq.event.intrusion.disarmed.alarm |
| System disarmed remotely during active alarm by | Warn | pq.event.intrusion.disarmed.alarm.remote |
| System disarmed remotely by | Info | pq.event.intrusion.disarmed.remote |
| System disarmed by schedule ({scheduleName}) | Info | pq.event.intrusion.disarmed.schedule |
| System disarmed earlier than schedule at {thingName} by {personName} | Warn | pq.event.intrusion.disarmed.schedule.early |
| System disarmed later than schedule at {thingName} by {personName} | Warn | pq.event.intrusion.disarmed.schedule.late |
| System disarming denied to {personName} at {thingName} | Warn | pq.event.intrusion.disarming.denied |
| System disarming failed at {thingName} by {personName} | Warn | pq.event.intrusion.disarming.failed |
| Duress alarm from {personName} at {thingName} | Critical | pq.event.intrusion.duress |
| Pre-alarm condition at | Warn | pq.event.intrusion.prealarm |
| Premises closed later than schedule at | Warn | pq.event.intrusion.schedule.closed_late |
| Test mode completed at {thingName} by {personName} | Info | pq.event.intrusion.testing.completed |
| Test mode started at {thingName} by {personName} | Info | pq.event.intrusion.testing.started |
| Panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic |
| Panic alarm cleared at | Info | pq.event.safety.panic.cleared |
| Fire panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.fire |
| Medical panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.medical |
| Police/holdup panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.police |
Zone¶
| Message | Severity | Event id |
|---|---|---|
| Fire alarm at {thingName} zone {zoneId} ({detectorType}) | Critical | pq.event.fire.alarm |
| Conditional fire alarm at {thingName} zone {zoneId} | Critical | pq.event.fire.alarm.conditional |
| General fire alarm at {thingName} zone {zoneId} | Critical | pq.event.fire.alarm.general |
| Section fire alarm at {thingName} zone {zoneId} | Critical | pq.event.fire.alarm.section |
| Fire condition cleared at | Info | pq.event.fire.cleared |
| Manual fire alarm activated at {thingName} by {personName} | Critical | pq.event.fire.manual |
| Fire pre-alarm at | Warn | pq.event.fire.prealarm |
| Smoke cleared at | Info | pq.event.fire.smoke.cleared |
| Smoke detected at {thingName} (level: {smokeLevel}) | Critical | pq.event.fire.smoke.detected |
| Water flow detected in suppression system at | Critical | pq.event.fire.suppression.flow |
| Fire test activation at | Info | pq.event.fire.test.activation |
| Fire test completed at {thingName} ({testType}) by {personName} | Info | pq.event.fire.test.completed |
| Fire test fault at {thingName} ({faultType}) | Warn | pq.event.fire.test.fault |
| Fire test passed at {thingName}, waiting for finish | Info | pq.event.fire.test.passed |
| Fire test started at {thingName} ({testType}) by {personName} | Info | pq.event.fire.test.started |
| Intrusion alarm at | Critical | pq.event.intrusion.alarm |
| Zone {thingName} bypassed by {personName} | Info | pq.event.intrusion.bypassed |
| Zone {thingName} bypass cleared by {personName} | Info | pq.event.intrusion.bypassed.cleared |
| Zone {thingName} bypass cleared remotely by {personName} | Info | pq.event.intrusion.bypassed.cleared.remote |
| Zone {thingName} bypassed remotely by {personName} | Info | pq.event.intrusion.bypassed.remote |
| Intrusion condition cleared at {thingName} by {personName} | Info | pq.event.intrusion.cleared |
| Contact closed at | Info | pq.event.intrusion.contact.closed |
| Contact open at | Warn | pq.event.intrusion.contact.open |
| Forced entry detected at | Critical | pq.event.intrusion.entry.forced |
| Motion cleared at | Info | pq.event.intrusion.motion.cleared |
| Motion detected at | Info | pq.event.intrusion.motion.detected |
| Pre-alarm condition at | Warn | pq.event.intrusion.prealarm |
| Tamper alarm at {thingName} ({tamperType}) | Critical | pq.event.intrusion.tamper |
| Tamper alarm cleared at | Info | pq.event.intrusion.tamper.cleared |
| Test mode completed at {thingName} by {personName} | Info | pq.event.intrusion.testing.completed |
| Test mode started at {thingName} by {personName} | Info | pq.event.intrusion.testing.started |
| Zone shutdown at | Warn | pq.event.intrusion.zone.shutdown |
| Panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic |
| Panic alarm cleared at | Info | pq.event.safety.panic.cleared |
| Medical panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.medical |
| Police/holdup panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.police |
| Supervision fault at | Warn | pq.event.supervision.fault |
| Fault cleared at {thingName} ({faultType}) | Info | pq.event.technical.fault.cleared |
Output¶
| Message | Severity | Event id |
|---|---|---|
| Output activated at | Info | pq.event.control.activated |
| Output {thingName} activated remotely by {personName} | Info | pq.event.control.activated.remote |
| Output deactivated at | Info | pq.event.control.deactivated |
| Output {thingName} deactivated remotely by {personName} | Info | pq.event.control.deactivated.remote |
Zone Expander¶
| Message | Severity | Event id |
|---|---|---|
| Power failure at | Critical | pq.event.energy.power.failure |
| Power restored at | Info | pq.event.energy.power.restored |
| UPS activated at {thingName} (battery: {batteryPercentage}%) (runtime: {estimatedRuntime}) | Warn | pq.event.energy.ups.active |
| Tamper alarm at {thingName} ({tamperType}) | Critical | pq.event.intrusion.tamper |
| Tamper alarm cleared at | Info | pq.event.intrusion.tamper.cleared |
| Supervision fault at | Warn | pq.event.supervision.fault |
| PCS module missing on | Error | pq.event.system.device.module.missing.pcs |
| Critical battery level at {thingName} ({batteryPercentage}%) (est. {estimatedRemaining} remaining) | Critical | pq.event.technical.battery.critical |
| Battery fault at {thingName} (voltage: {batteryVoltage}V) ({batteryPercentage}%) | Warn | pq.event.technical.battery.fault |
| Low battery at {thingName} ({batteryPercentage}%) | Warn | pq.event.technical.battery.low |
| Battery condition normal at | Info | pq.event.technical.battery.normal |
| Communication lost with {thingName} (last seen: {lastSeenTimestamp}) | Error | pq.event.technical.communication.lost |
| Communication restored with {thingName} (outage: {outageDuration}) | Info | pq.event.technical.communication.restored |
| Telephone reporting communication failed on | Error | pq.event.technical.communication.telephone.failed |
| Voice reporting failed on | Error | pq.event.technical.communication.voice_reporting.failed |
| Fault cleared at {thingName} ({faultType}) | Info | pq.event.technical.fault.cleared |
| Printer output failed on | Warn | pq.event.technical.peripheral.printer.failed |
Keypad¶
| Message | Severity | Event id |
|---|---|---|
| Access denied at {thingName}: invalid PIN | Warn | pq.event.access.denied.pin |
| Reader {thingName} locked out after {failedAttempts} failed attempts for {lockoutDuration} | Warn | pq.event.access.reader.lockout.triggered |
| Power failure at | Critical | pq.event.energy.power.failure |
| Power restored at | Info | pq.event.energy.power.restored |
| UPS activated at {thingName} (battery: {batteryPercentage}%) (runtime: {estimatedRuntime}) | Warn | pq.event.energy.ups.active |
| Panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic |
| Panic alarm cleared at | Info | pq.event.safety.panic.cleared |
| Fire panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.fire |
| Medical panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.medical |
| Police/holdup panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.police |
| Admin mode entered at {thingName} by {personName} | Warn | pq.event.security.admin.entered |
| Admin mode exited at {thingName} by {personName} | Info | pq.event.security.admin.exited |
| User code created at {thingName} for {personName} (slot {codeSlot}) by {operatorName} | Info | pq.event.security.code.created |
| User code deleted at {thingName} for {personName} (slot {codeSlot}) by {operatorName} | Warn | pq.event.security.code.deleted |
| User code locked at {thingName} for {personName} after {failedAttempts} failed attempts for {lockoutDuration} | Warn | pq.event.security.code.locked |
| User code modified at {thingName} for {personName} (slot {codeSlot}) by {operatorName} | Warn | pq.event.security.code.modified |
| User code unlocked at {thingName} for {personName} by {operatorName} | Info | pq.event.security.code.unlocked |
| User command '{commandCode}' entered at {thingName} by {personName} | Info | pq.event.security.keypad.command |
| Supervision fault at | Warn | pq.event.supervision.fault |
| Device {thingName} disabled by {personName} | Warn | pq.event.system.device.disabled |
| Device {thingName} enabled by {personName} | Info | pq.event.system.device.enabled |
| PCS module missing on | Error | pq.event.system.device.module.missing.pcs |
| Critical battery level at {thingName} ({batteryPercentage}%) (est. {estimatedRemaining} remaining) | Critical | pq.event.technical.battery.critical |
| Battery fault at {thingName} (voltage: {batteryVoltage}V) ({batteryPercentage}%) | Warn | pq.event.technical.battery.fault |
| Low battery at {thingName} ({batteryPercentage}%) | Warn | pq.event.technical.battery.low |
| Battery condition normal at | Info | pq.event.technical.battery.normal |
| Communication lost with {thingName} (last seen: {lastSeenTimestamp}) | Error | pq.event.technical.communication.lost |
| Communication restored with {thingName} (outage: {outageDuration}) | Info | pq.event.technical.communication.restored |
| Telephone reporting communication failed on | Error | pq.event.technical.communication.telephone.failed |
| Fault cleared at {thingName} ({faultType}) | Info | pq.event.technical.fault.cleared |
| Printer output failed on | Warn | pq.event.technical.peripheral.printer.failed |
Keypad with Reader¶
| Message | Severity | Event id |
|---|---|---|
| All credentials deleted from {thingName} by {personName} ({deletedCount} credentials) | Critical | pq.event.access.credential.deleted.all |
| Credential deleted from {thingName} for {personName} ({credentialType}) | Info | pq.event.access.credential.deleted.single |
| Duplicate credential detected at {thingName} for {personName} ({credentialType}) | Warn | pq.event.access.credential.enrollment.duplicate |
| Credential enrollment failed at {thingName} for {personName} | Warn | pq.event.access.credential.enrollment.failed |
| Credential enrolled for {personName} at {thingName} ({technology}) | Info | pq.event.access.credential.enrollment.succeeded |
| Credential use limit changed for {personName} at {thingName}: {remainingUses} uses remaining | Info | pq.event.access.credential.limit.usage.changed |
| Credential use limit exhausted for {personName} at {thingName} | Warn | pq.event.access.credential.limit.usage.exhausted |
| Access denied to {personName} at {thingName} (credential: {credentialType}) | Warn | pq.event.access.denied |
| Access denied to {personName} at {thingName}: antipassback violation | Warn | pq.event.access.denied.antipassback |
| Access denied at {thingName}: credential blocked {plate} ({personName}) - {blockReason} (Direction: {direction}) | Warn | pq.event.access.denied.blocked |
| Access denied at {thingName}: second person required | Warn | pq.event.access.denied.dual |
| Access denied at {thingName}: credential expired ({personName}) - expired {expiryDate} | Warn | pq.event.access.denied.expired |
| Access denied at {thingName}: biometric fraud detected ({credentialType}) | Critical | pq.event.access.denied.fraud |
| Access denied at {thingName}: incomplete multifactor sequence ({personName}) | Warn | pq.event.access.denied.incomplete |
| Access denied at {thingName}: interlock active | Warn | pq.event.access.denied.interlock |
| Access denied at {thingName}: invalid credential ({credentialType}) | Warn | pq.event.access.denied.invalid |
| Access denied at {thingName}: access point locked | Warn | pq.event.access.denied.locked |
| Access denied at {thingName}: occupancy limit reached | Warn | pq.event.access.denied.occupancy |
| Access denied at {thingName}: invalid PIN | Warn | pq.event.access.denied.pin |
| Access denied outside scheduled hours at {thingName} to {personName} (schedule: {scheduleName}) | Warn | pq.event.access.denied.schedule |
| Access denied at {thingName}: unknown {credentialType} ({card_display}) | Warn | pq.event.access.denied.unknown |
| Access granted to {personName} at {thingName} using {credentialType} {plate} (Direction: {direction}) | Info | pq.event.access.granted |
| Access granted despite antipassback violation to {personName} at {thingName} | Warn | pq.event.access.granted.antipassback |
| Reader {thingName} lockout cleared | Info | pq.event.access.reader.lockout.cleared |
| Reader {thingName} locked out after {failedAttempts} failed attempts for {lockoutDuration} | Warn | pq.event.access.reader.lockout.triggered |
| Duress alarm from {personName} at {thingName} | Critical | pq.event.intrusion.duress |
| Duress alarm cleared at | Info | pq.event.intrusion.duress.cleared |
| Panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic |
| Panic alarm cleared at | Info | pq.event.safety.panic.cleared |
| Fire panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.fire |
| Medical panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.medical |
| Police/holdup panic button activated at {thingName} by {personName} | Critical | pq.event.safety.panic.police |
| Admin mode entered at {thingName} by {personName} | Warn | pq.event.security.admin.entered |
| Admin mode exited at {thingName} by {personName} | Info | pq.event.security.admin.exited |
| User code created at {thingName} for {personName} (slot {codeSlot}) by {operatorName} | Info | pq.event.security.code.created |
| User code deleted at {thingName} for {personName} (slot {codeSlot}) by {operatorName} | Warn | pq.event.security.code.deleted |
| User code locked at {thingName} for {personName} after {failedAttempts} failed attempts for {lockoutDuration} | Warn | pq.event.security.code.locked |
| User code modified at {thingName} for {personName} (slot {codeSlot}) by {operatorName} | Warn | pq.event.security.code.modified |
| User code unlocked at {thingName} for {personName} by {operatorName} | Info | pq.event.security.code.unlocked |
| User command '{commandCode}' entered at {thingName} by {personName} | Info | pq.event.security.keypad.command |
| Device {thingName} disabled by {personName} | Warn | pq.event.system.device.disabled |
| Device {thingName} enabled by {personName} | Info | pq.event.system.device.enabled |
| Communication lost with {thingName} (last seen: {lastSeenTimestamp}) | Error | pq.event.technical.communication.lost |
| Communication restored with {thingName} (outage: {outageDuration}) | Info | pq.event.technical.communication.restored |
ACM-12¶
| Message | Severity | Event id |
|---|---|---|
| Power failure at | Critical | pq.event.energy.power.failure |
| Power restored at | Info | pq.event.energy.power.restored |
| UPS activated at {thingName} (battery: {batteryPercentage}%) (runtime: {estimatedRuntime}) | Warn | pq.event.energy.ups.active |
| Tamper alarm at {thingName} ({tamperType}) | Critical | pq.event.intrusion.tamper |
| Tamper alarm cleared at | Info | pq.event.intrusion.tamper.cleared |
| Supervision fault at | Warn | pq.event.supervision.fault |
| PCS module missing on | Error | pq.event.system.device.module.missing.pcs |
| Critical battery level at {thingName} ({batteryPercentage}%) (est. {estimatedRemaining} remaining) | Critical | pq.event.technical.battery.critical |
| Battery fault at {thingName} (voltage: {batteryVoltage}V) ({batteryPercentage}%) | Warn | pq.event.technical.battery.fault |
| Low battery at {thingName} ({batteryPercentage}%) | Warn | pq.event.technical.battery.low |
| Battery condition normal at | Info | pq.event.technical.battery.normal |
| Communication lost with {thingName} (last seen: {lastSeenTimestamp}) | Error | pq.event.technical.communication.lost |
| Communication restored with {thingName} (outage: {outageDuration}) | Info | pq.event.technical.communication.restored |
| Telephone reporting communication failed on | Error | pq.event.technical.communication.telephone.failed |
| Voice reporting failed on | Error | pq.event.technical.communication.voice_reporting.failed |
| Fault cleared at {thingName} ({faultType}) | Info | pq.event.technical.fault.cleared |
| Printer output failed on | Warn | pq.event.technical.peripheral.printer.failed |
Door¶
| Message | Severity | Event id |
|---|---|---|
| Door {thingName} closed | Info | pq.event.access.door.closed |
| Door {thingName} forced open | Critical | pq.event.access.door.forced |
| Door {thingName} forced open alarm cleared | Info | pq.event.access.door.forced.cleared |
| Door {thingName} held open | Warn | pq.event.access.door.held |
| Door {thingName} held open alarm cleared | Info | pq.event.access.door.held.cleared |
| Door {thingName} held extended by {personName} | Info | pq.event.access.door.held.extended |
| Door {thingName} locked remotely by {personName} | Info | pq.event.access.door.locked.remote |
| Door {thingName} opened by {personName} | Info | pq.event.access.door.opened |
| Door {thingName} secured remotely by {personName} | Info | pq.event.access.door.secured.remote |
| Door {thingName} unlocked remotely by {personName} | Info | pq.event.access.door.unlocked.remote |
| Door {thingName} unsecured remotely by {personName} | Info | pq.event.access.door.unsecured.remote |
| Door {thingName} unsecured via REX | Info | pq.event.access.door.unsecured.rex |
| Emergency evacuation triggered at {thingName} by {personName} | Critical | pq.event.safety.emergency.evacuation |
| Emergency evacuation cleared at {thingName} by {personName} | Info | pq.event.safety.emergency.evacuation.cleared |
| Emergency evacuation cleared remotely at {thingName} by {personName} | Info | pq.event.safety.emergency.evacuation.cleared.remote |
| Emergency evacuation triggered remotely at {thingName} by {personName} | Critical | pq.event.safety.emergency.evacuation.remote |
| Emergency lockdown activated at {thingName} by {personName} | Critical | pq.event.safety.emergency.lockdown |
| Emergency lockdown cleared at {thingName} by {personName} | Info | pq.event.safety.emergency.lockdown.cleared |
| Emergency lockdown cleared remotely at {thingName} by {personName} | Info | pq.event.safety.emergency.lockdown.cleared.remote |
| Emergency lockdown activated remotely at {thingName} by {personName} | Critical | pq.event.safety.emergency.lockdown.remote |
Reader¶
| Message | Severity | Event id |
|---|---|---|
| All credentials deleted from {thingName} by {personName} ({deletedCount} credentials) | Critical | pq.event.access.credential.deleted.all |
| Credential deleted from {thingName} for {personName} ({credentialType}) | Info | pq.event.access.credential.deleted.single |
| Duplicate credential detected at {thingName} for {personName} ({credentialType}) | Warn | pq.event.access.credential.enrollment.duplicate |
| Credential enrollment failed at {thingName} for {personName} | Warn | pq.event.access.credential.enrollment.failed |
| Credential enrolled for {personName} at {thingName} ({technology}) | Info | pq.event.access.credential.enrollment.succeeded |
| Credential use limit changed for {personName} at {thingName}: {remainingUses} uses remaining | Info | pq.event.access.credential.limit.usage.changed |
| Credential use limit exhausted for {personName} at {thingName} | Warn | pq.event.access.credential.limit.usage.exhausted |
| Access denied to {personName} at {thingName} (credential: {credentialType}) | Warn | pq.event.access.denied |
| Access denied to {personName} at {thingName}: antipassback violation | Warn | pq.event.access.denied.antipassback |
| Access denied at {thingName}: credential blocked {plate} ({personName}) - {blockReason} (Direction: {direction}) | Warn | pq.event.access.denied.blocked |
| Access denied at {thingName}: second person required | Warn | pq.event.access.denied.dual |
| Access denied at {thingName}: credential expired ({personName}) - expired {expiryDate} | Warn | pq.event.access.denied.expired |
| Access denied at {thingName}: biometric fraud detected ({credentialType}) | Critical | pq.event.access.denied.fraud |
| Access denied at {thingName}: incomplete multifactor sequence ({personName}) | Warn | pq.event.access.denied.incomplete |
| Access denied at {thingName}: interlock active | Warn | pq.event.access.denied.interlock |
| Access denied at {thingName}: invalid credential ({credentialType}) | Warn | pq.event.access.denied.invalid |
| Access denied at {thingName}: access point locked | Warn | pq.event.access.denied.locked |
| Access denied at {thingName}: occupancy limit reached | Warn | pq.event.access.denied.occupancy |
| Access denied at {thingName}: invalid PIN | Warn | pq.event.access.denied.pin |
| Access denied outside scheduled hours at {thingName} to {personName} (schedule: {scheduleName}) | Warn | pq.event.access.denied.schedule |
| Access denied at {thingName}: unknown {credentialType} ({card_display}) | Warn | pq.event.access.denied.unknown |
| Access granted to {personName} at {thingName} using {credentialType} {plate} (Direction: {direction}) | Info | pq.event.access.granted |
| Access granted despite antipassback violation to {personName} at {thingName} | Warn | pq.event.access.granted.antipassback |
| Reader {thingName} lockout cleared | Info | pq.event.access.reader.lockout.cleared |
| Reader {thingName} locked out after {failedAttempts} failed attempts for {lockoutDuration} | Warn | pq.event.access.reader.lockout.triggered |
| Duress alarm from {personName} at {thingName} | Critical | pq.event.intrusion.duress |
| Duress alarm cleared at | Info | pq.event.intrusion.duress.cleared |