Sorry for hijacking this thread but I have a question related to the "unknown" status as well. What EventType ID is assigned to applications that go into an "unknown" state.
It should be in the 500 range I believe but when I look at the table dbo.eventtypes I do not see anything in the 500 range for SAM Unknown.
I'm running SAM 6.0.2
Thanks!