Hardware failures, including high availability (HA) failover and link failures.
Serious issues, including dropped connections with external devices, such as LDAP and RADIUS servers.
Mid-level notifications, such as antivirus package upgrades.
Minor severity notifications, such as user password changes.
Log in/log off, administrator name or password change, any configuration change, and all other events not covered by the other severity levels.