I’m investigating the logging of device disconnections, specifically for cameras, within XProtect.
My expectation is that when a device like a camera disconnects, whether due to a network issue or a physical disconnection (e.g., unplugging the network cable), an event or log entry would be generated within the system.
However, I’m currently not observing any log entries in the System logs or Audit logs when I physically disconnect (plug out) a camera’s network cable. Similarly, I’m not consistently seeing logs when a camera goes offline due to other communication problems.
Could you please clarify:
- Is there an expected log entry or event generated in XProtect when a device (like a camera) is physically disconnected (cable unplugged)? If so, which log type should I be looking at?
- What specific event should I be monitoring or using in a rule to reliably detect and log both physical disconnections and communication-related disconnections of a camera? I’ve tried using the “Device Status Changed” event, but I’m not consistently seeing log entries for physical disconnections.
Understanding the expected behavior and the correct events to monitor would be very helpful in setting up proper alerting and diagnostics for device connectivity issues.
Thank you for your time and assistance.