5.5.1 Search method

(1) Search procedure

To search for JP1 events:

1. To use the attribute value of a JP1 event displayed in the events list as the search condition, select a JP1 event from the events list in the Event Console window.

2. In the Event Console window, choose View and then Search Events. Alternatively, on the Search Events page of the Event Console window, click the Search Events button.

   The Event Search Conditions window opens.

3. In the Event Search Conditions window, specify search conditions.

   In the Event Search Conditions window, specify the following items:

   • Specify the search object

     When you are using the integrated monitoring database, Search object is displayed in the Event Search Conditions window, and you can select either the integrated monitoring database or the event database. If you are not using the integrated monitoring database, the item Search object is not displayed. JP1 events in the event database are searched.

   • Enter the search host

     Enter the search object host name (event server name) in Search host.

     By default, the connected host name is specified.

     When you are using the integrated monitoring database, if you select the integrated monitoring database in Search object, the item Search host becomes inactive.

     The address of the specified host name is resolved inside the manager. Therefore, specify a host name that can be resolved inside the manager.

     In an environment protected by a firewall, exercise special care when using a viewer that is outside the firewall to search for events, since a single host IP address may appear differently when seen from outside or inside the firewall. When you use a viewer that is outside the firewall and you specify an IP address to search for events, specify an IP address that can be resolved inside the manager.

     Specify an IP address also when you are connecting to an agent that is connected to multiple LANs via an NIC of a host other than the representative host.

   • Specify a search direction

     Specify the direction in which to search the integrated monitoring database or the event database.

     Specify either Past direction or Future direction as the event search direction. The default is Past direction.

     For details, see 5.5.1(2) Event search direction.

   • Specify a condition group

     To differentiate between various event search conditions, names are assigned to condition groups.

     You can specify multiple condition groups, and condition groups are ORed.

     To specify condition groups, you must first click the Show List button to show the List area.

     Adding a condition group: Clicking the Add button adds an undefined name conditions-group-n (where n is a number).

     Copying a condition group: Selecting a condition group and clicking the Copy button adds condition-group-name-selected-for-copying.

     Deleting a condition group: Selecting a condition group and clicking the Delete button deletes the selected condition group.

     Renaming a condition group: Selecting a condition group displays the name of the selected condition group in Condition group name. Editing this name and moving the focus changes the name of the condition group.

   • Set up a condition (detailed settings of each condition group)

     Set up a pass condition or exclusion-condition for the JP1 events to be searched for.

     You can set up a condition by combining multiple conditions, and the conditions are ANDed.

     The items you can specify are the event source host name, registered host name, severity level, object type, object name, root object type, root object name, occurrence, user name, message, product name, event ID, start time, end time, registered time, arrival time, response status (Processed, Unprocessed, Processing, or Held), action status (Taken or Not taken), memo, items for repeated events, and extended attributes.

     If the memo function is disabled, the memo item cannot be specified. Also, if the mapping of the event source host is invalid, the event source host name cannot be specified. If repeated event monitoring suppression is disabled, you cannot specify items related to repeated events.

     If the search object is the integrated monitoring database and if the severity changing function is being used, you can set the severity item to the severity after a change. You can also specify an original severity level and a new severity level.

     For the original severity level, you can specify a severity level prior to a change. For the new severity level, you can specify whether the severity level has been changed.

     To commit the attribute value of the JP1 event selected in the Event Console window to the condition list, click the Read From Selected Event button.

     You can also use a regular expression to specify a registered host name, object type, object name, root object type, root object name, occurrence, user name, message, product name, extended attribute, and event source host name. For details about using a regular expression to specify search conditions, see 5.5.1(3) Using regular expressions to specify search conditions.

4. Click OK.

   When the Search Events page opens and the search begins, Searching is displayed in the page tab. Events matching the search condition are sequentially displayed on the Search Events page of the Event Console window as search results.

   To cancel the event search, click the Cancel Search button. You can halt the search if you have executed an event search with a wrong search condition, or when you have found the event you want to acquire.

To Page Top

(2) Event search direction

By specifying a search direction, you can search a range that satisfies a condition. In the Preferences window, you can change the number of events that can be acquired from a single search (the default is 20 events). By clicking the Search for Next Event button on the Search Events page of the Event Console window, you can acquire and display the events that could not be acquired in a single search.

When you specify Past direction for the event search direction, a search is executed beginning with the latest JP1 event registered in the integrated monitoring database or the event database (events are acquired from the latest event toward earlier events). When you specify Past direction and execute a search, events are acquired starting with the latest one, and these events are then displayed chronologically (in order of earliest to latest). Clicking the Search for Next Event button displays the next set of events that are acquired with the Search for Next Event button above the events that are already displayed. Note that events are always displayed chronologically starting with the earlier ones (that is, of the events that are acquired, earlier events are displayed above later events).

When you specify Future direction for the event search direction, a search is executed beginning with the earliest JP1 event registered in the integrated monitoring database or the event database (events are acquired from the earliest event toward later events). When you specify Future direction and execute a search, events are acquired starting with the earliest one. Clicking the Search for Next Event button displays the next set of events that are acquired with the Search for Next Event button below the events that are already displayed.

See the examples in 5.5.2 Displaying the search results to confirm the behavior of the event search operation.

To Page Top

(3) Using regular expressions to specify search conditions

You can specify a regular expression in the search conditions specified in the Event Search Conditions window. You can specify a regular expression for the registered host name, object type, object name, root object type, root object name, occurrence, user name, message, product name, and an extended attribute.

To specify a regular expression as a search condition in the Event Search Conditions window, specify a regular expression as a search condition in the Conditions text box, and then select Regular expression from the list box on the right side. To specify a regular expression for an extended attribute, use the Event Search Detailed Conditions (Program-Specific Information in Extended Attribute) window.

The types of regular expressions that can be used depend on the settings of JP1/Base at the search target host. For details, see the explanation of regular expressions in the chapter on setup in the Job Management Partner 1/Base User's Guide.

To Page Top