System Events Captured

  • Published on Jul 28, 2025
  • 2 minute(s) read
Prev Next

Applicable to Administrators

Android Capture sends two types of events to the administrator:

  • Summary of the status and users.

  • Events performed by users on their Android device. The following table lists the events that are captured by the app:

Event Name

Event description

Body Text

Install Event

  • The event is triggered after the user successfully installs the application and sign in for the first time.

  • The event is not triggered if the user doesn’t sign up to the app.

  • The event is triggered again if the user re-installs the app.

Android Capture Installed (xx.xx.x)

Version Upgrade Event

  • The event is triggered after every manual or automatic version update of the app.

  • User intervention is not required to trigger this event.

Android Capture Version Updated  (xx.xx.x)

Idle Event

  • The event is triggered after every 24 hours of inactivity.

  • Inactivity means no incoming or outgoing messages or calls.

  • The app resets to count towards 24 hours after every incoming or outgoing message or call.

Android Capture heartbeat – last archiving event on Date/time. No archiving for X days

SIM Removal Event

  • The event is triggered when the user removes the registered SIM Card with the primary mobile number.

  • If a different SIM card is removed, the event is not be triggered.

SIM Card was removed

SIM Changed Back Event

  • The event is triggered when the user restores the registered SIM Card with the primary mobile number.

  • If a different SIM card is installed, the event is not be triggered.

SIM Card was Restored: Number reported #

Low Storage Event

  • The event is triggered when the device storage reaches below 1 GB.

  • The event will be re-sent every 24 hours as long as the device storage doesn’t rise above 1 GB.

Note

Smarsh does not delete the files of recorded voice call from the call recordings folder on the phone.

Smarsh does not delete SMS or MMS messages from the messages database on the phone.

The device has reached minimum internal storage threshold of XX MB

Uninstall Event

  • The event is triggered if the user tries to remove the “Admin” permission elevation from the Android Capture.

Android Capture Uninstall risk

Roaming Event

  • The event is triggered every 24 hours while the device is in “Roaming” state.

The device is in Roaming state

Idle + Pending Messages Event

  • The event is triggered every 24 hours of inactivity.

  • Inactivity means no incoming or outgoing messages or calls.

  • The app resets to count towards 24 hours after every incoming or outgoing message or call.

  • Message delivery can be pending when the app is working in “WiFi-Only” mode. This event is not observed when the app is working in “Wi-Fi + Cellular data” mode.

Android Capture heartbeat Pending: 7 SMS, 1 MMS, 4 Calls