> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# System Events Management

An <Tooltip tip="Any traffic or data exchange detected by LevelBlue products through a sensor or external devices such as a firewall.">event</Tooltip> is a record of activity, which contains information and that resides in a log file. USM Anywhere collects, normalizes, and enriches logs with additional <Tooltip tip="Information about other associated data, used to help organize information, provide identification, support archiving of data, and other functions.">metadata</Tooltip>, which are called events.

USM Anywhere enables you to display system events. These events are any events generated within your environment. They are not <Tooltip tip="In USM Anywhere you can execute an action from alarms, events, and vulnerabilities to run a scan, get forensic information, or execute a response for a configured BlueApp.">actions</Tooltip> associated with any of the <Tooltip tip="Asset from which logs and other system status and event information is collected and processed.">monitored assets</Tooltip> or networks collected by your environment. For instance, the system generates a system event when an <Tooltip tip="An IP-addressable host, including but not limited to network devices, virtual servers, and physical servers.">asset</Tooltip>, a user, or a node is created, updated, or deleted or when you modify your <Tooltip tip="A method of access control in which a user is granted access only after successfully presenting several separate pieces of evidence to an authentication mechanism – typically at least two of the following categories: knowledge, possession, and inherence.">MFA</Tooltip> subscription.

This topic discusses these subtopics:

* [USM Anywhere System Events List View](/documentation/usm-anywhere/user-guide/system-events/system-events-list-view)
* [Searching System Events](/documentation/usm-anywhere/user-guide/system-events/searching-system-events)
* [Viewing System Event Details](/documentation/usm-anywhere/user-guide/system-events/viewing-system-events-details)
* [Regular Events and System Events](/documentation/usm-anywhere/user-guide/system-events/rules-for-system-events)
  * [Orchestration Rule for the "Sensor Appears Offline" System Event](/documentation/usm-anywhere/user-guide/system-events/sensor-appears-offline)
  * [Orchestration Rule for the "Sensor Reconnected" System Event](/documentation/usm-anywhere/user-guide/system-events/sensor-reconnected)
  * [Orchestration Rule for the "Event from Asset Not Received" System Event](/documentation/usm-anywhere/user-guide/system-events/event-asset-not-received)
  * [Orchestration Rule for the "Event from BlueApp Not Received" System Event](/documentation/usm-anywhere/user-guide/system-events/event-alienapp-not-received)