hurricaneguy
Technical User
Our SECC went into Emergency Mode this morning.I'm trying to figure our who did it. I found an event that says:
Event Code 46112
Severity Information
User(M SUPERVISOR) caused TaskFlow Variable EMERGENCY to be modified.
I think this indicates the user that changed it. But several computers have this same user logged in.
Is this the correct Event? Why would activation of Emergency mode be only an Information severity? We got the same event when the sysadmin user restored it. One of the users said she tried to restore it. So I'm not sure if this record is her trying to restore it or her actually taking it down. I can find no other events that seem to have anything else to do with emergency.
Event Code 46112
Severity Information
User(M SUPERVISOR) caused TaskFlow Variable EMERGENCY to be modified.
I think this indicates the user that changed it. But several computers have this same user logged in.
Is this the correct Event? Why would activation of Emergency mode be only an Information severity? We got the same event when the sysadmin user restored it. One of the users said she tried to restore it. So I'm not sure if this record is her trying to restore it or her actually taking it down. I can find no other events that seem to have anything else to do with emergency.