Prisma Access Agent Administration
  • Prisma Access Agent Administration
  • Prisma Access Agent Documentation
  • All Documentation
>
Management Log Event Details
Focus
Download PDF
Focus
  1. Home
  2. Prisma Access Agent
  3. Troubleshoot Prisma Access Agents
  4. Prisma Access Agent Logs and Management Logs
  5. Audit Management Logs
  6. Management Log Event Details
Download PDF
Prisma Access Agent

Management Log Event Details

Table of Contents
Review detailed descriptions of Prisma Access Agent management events to help understand the management logs.
Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • Strata Logging Service
  • Minimum Required Prisma Access Version: 5.1 Preferred or Innovation
  • Prisma Access license with the Mobile User subscription
  • Prisma Access Agent version: 25.1.0.14
  • macOS 14 and later or Windows 10 version 2024 and later desktop devices
  • Contact your Palo Alto Networks account representative to activate the Prisma Access Agent feature
To help you understand an event that has occurred, you can review descriptions of log events that are related to the management of Prisma Access Agents.
The event IDs and possible associated activities in the following table correspond respectively to the values in the Event ID Value (event_id.value) in the log viewer.
The following event IDs are used in the EPM log subtype.
Event ID ValueDescription
Agent HipIndicates an event to download the Prisma Access Agent host information profile (HIP).
Agent LogIndicates an event to download Prisma Access Agent logs.
Agent LogoutIndicates an event to log out the Prisma Access Agent.
Agent Remote ShellIndicates a remote shell event on an endpoint that was initiated in the ManagePrisma Access Agent.
Epm Auth ResponseIndicates an event for sending an authentication response to the Prisma Access Agent.
Epm Cie Token ReceivedIndicates an event for receiving a Cloud Identity Engine token for an end user.
Epm Cie Token ValidationIndicates an event for validating a Cloud Identity Engine token for an end user.
Epm Gateway Config RequestIndicates an event for a Prisma Access location configuration request.
Epm Gateway Config ResponseIndicates an event for sending an authentication response to the Prisma Access Agent.
HIP CheckIndicates an event for HIP checks.
HIP UploadIndicates an event to upload a new HIP to an endpoint.

Technical Documentation

Company

Legal Notices

© 2025 Palo Alto Networks, Inc. All rights reserved.