Where to find info on "Event Code equals to 7:211|7:212|7:293|7:269|14:323|69:52"

  • 10 January 2022
  • 3 replies

Userlevel 4
Badge +15

I received the following alert over the weekend:

  • Event ID: 2791775
  • Monitoring Criteria: (Event Code equals to 7:211|7:212|7:293|7:269|14:323|69:52)
  • Severity: Critical
  • Event Date: Fri Jan 7 17:03:07 2022
  • Program: cvd
  • Client: INF-SRV54
  • Description: A suspicious file [L:\Logs\Unlimited Quota\IgnoredLogs\] is detected on the machine [INF-SRV54]. Please alert your administrator.


I’ve searched but can’t find information on the codes 7:211, 7:212, etc.  Does anyone know where to find information on these?



Best answer by Mike Struening RETIRED 10 January 2022, 17:12

View original

3 replies

Userlevel 7
Badge +23

Hey @Ken_H , you should be able to find info in a few places:

All codes listed:

Knowledge Search: (does not require login) (requires login)

Let me know if this helps!

Userlevel 4
Badge +15

Thanks @Mike Struening, The first link you provided finds all but two of the codes.  The second lists cases that I assume reference the specific code.  That third link doesn’t actually return anything at all.  I’ll pass on the details on the codes to my Exchange admin for their investigation.

I appreciate the help.


Userlevel 7
Badge +23

Moving new question to its own thread for better tracking: