An is a record of activity that contains information and resides in a log file. USM Anywhere collects, normalizes, and enriches logs with additional , which are called events. USM Anywhere enables you to display system events. These events are any events generated within your environment. They are not associated with any of the or networks collected by your environment. For instance, the system generates a system event when an , a user, or a node is created, updated, or deleted or when you modify your multifactor authentication () subscription. This topic discusses these subtopics: