Press CTRL+K to open search

Inventory mode events in ePO - SaaS

  • Published on Aug 28, 2026
  • 1 minute(s) read
Prev Next

This table provides a detailed list of all Inventory mode events.

Event ID on endpoints

Threat Event ID on ePO - SaaS

Event Name

Event display string

Application Control client severity

ePO - SaaS severity

Event type

147

20846

BOOTING_INVENTORY

_MODE

Booted in Inventory Mode

Information

Information

SC

148

20847

INVENTORY_MODE

_DEFERRED

Inventory Mode on Reboot

Information

Information

SC

149

20848

END_INVENTORY_MODE

_DEFERRED

Closed Inventory Mode

Information

Information

SC

145

20844

PULL_INVENTORY_ENDED

Pull Inventory Completed

Information

Information

SC

Related articles
  • Inventory mode events in ePO - On-prem
    Application Control and Change Control > Application and Change Control 8.x > Trellix Application and Change Control 8.4.x - Windows Product Guide > Using Application Control in Inventory mode
  • Inventory mode events in ePO - On-prem
    Application Control and Change Control > Application and Change Control 8.x > Trellix Application and Change Control 8.3.x - Windows Product Guide > Using Application Control in Inventory mode
  • List of events in a managed environment
    Application Control and Change Control > Application and Change Control 6.x > Trellix Application and Change Control 6.6.x - Linux Product Guide > Using the software > Using events