# Audit trail codes Engine (classic)

{% hint style="warning" %}
The audit trail codes on this page apply to Engine, Nexthink Experience.

Refer to the [Audit trail codes Infinity ](https://docs.nexthink.com/platform/security/exporting-audit-logs/audit-trail-codes)documentation for audit trail codes that apply to Nexthink Infinity.

Refer to the [Exporting audit logs](https://docs.nexthink.com/platform/security/exporting-audit-logs) to learn how to query audit trail codes.
{% endhint %}

| Code  | Description                                                                               |
| ----- | ----------------------------------------------------------------------------------------- |
| 10001 | <p>Engine is up and running</p><p><code>\[Engine-01</code></p>                            |
| 10002 | <p>Engine stopped with error</p><p><code>\[Engine-01</code></p>                           |
| 10003 | <p>Engine stopped gracefully</p><p><code>\[Engine-01</code></p>                           |
| 10004 | <p>Engine stopped forcefully</p><p><code>\[Engine-01</code></p>                           |
| 10005 | <p>Database created</p><p><code>\[Engine-01</code></p>                                    |
| 10006 | <p>Finder user logged in</p><p><code>\[Engine-01</code></p>                               |
| 10007 | <p>Finder user logged out</p><p><code>\[Engine-01</code></p>                              |
| 10008 | <p>Finder user login attempt</p><p><code>\[Engine-01</code></p>                           |
| 10009 | <p>Finder account created</p><p><code>\[Engine-01</code></p>                              |
| 10010 | <p>Finder account deleted</p><p><code>\[Engine-01</code></p>                              |
| 10011 | <p>Finder account updated</p><p><code>\[Engine-01</code></p>                              |
| 10012 | <p>Finder account password changed</p><p><code>\[Engine-01</code></p>                     |
| 10017 | <p>Global alert created</p><p><code>\[Engine-01</code></p>                                |
| 10018 | <p>Global alert deleted</p><p><code>\[Engine-01</code></p>                                |
| 10019 | <p>Global alert updated</p><p><code>\[Engine-01</code></p>                                |
| 10026 | <p>LDAP synchronization request</p><p><code>\[Engine-01</code></p>                        |
| 10028 | <p>Object manually tagged</p><p><code>\[Engine-01</code></p>                              |
| 10029 | <p>Binary filtering rule (storage policy) updated</p><p><code>\[Engine-01</code></p>      |
| 10030 | <p>Executable filtering rule (storage policy) updated</p><p><code>\[Engine-01</code></p>  |
| 10031 | <p>Application filtering rule (storage policy) updated</p><p><code>\[Engine-01</code></p> |
| 10032 | <p>Device filtering rule (storage policy) updated</p><p><code>\[Engine-01</code></p>      |
| 10034 | <p>Finder request execution</p><p><code>\[Engine-01</code></p>                            |
| 10035 | <p>Alert execution</p><p><code>\[Engine-01</code></p>                                     |
| 10038 | <p>License updated</p><p><code>\[Engine-01</code></p>                                     |
| 10039 | <p>NXQL request execution</p><p><code>\[Engine-01</code></p>                              |