ZENworks audit events are of two types:
Change Events: These events capture configuration changes made to the zone through ZENworks Control Center. You can capture a variety of changes ranging from bundle changes to ZENworks system changes. For example, you can configure an audit event that records the activity of an administrator assigning a bundle to a device. For information about the various change events, see Section 4.1, Change Event Categories.
Agent Events These events capture actions that occur on the ZENworks managed devices. They are also called Device events. For information about the various agent events, see Section 5.1, Agent Event Categories.
Both change events and agent events can be enabled for all devices in the zone or for individual devices.