5.9.2 Displaying extended attributes of JP1 events (mapping of event information)
By mapping a program-specific extended attribute to an item with a basic attribute or common extended attribute, you can display the content of a program-specific extended attribute in the display item (basic attribute or common extended attribute) column of the events list.
An example follows.
- Mapping definition settings
-
The following mapping definitions are set:
- Event information mapping definition 1
-
Mapping program-specific extended attribute LOGHOST to the registered host name.
Mapping-target event ID: 12E0
- Event information mapping definition 2
-
Mapping program-specific extended attribute LOGTIME to the arrival time.
Mapping-target event ID: 12E0
- Events generated:
-
Events with the following content are generated.
Table 5‒6: Event generation content No.
Attribute
Content
1
Severity
Error
2
Registration time
2001/10/30 17:47:31
3
Arrival time
2001/10/30 17:47:39
4
Registered host name
host_A
5
User name
jp1nps
6
Event ID
000012E0
7
Message
KAJC391-E ...
8
LOGHOST
loghost_1
9
LOGTIME
1003976997#
- Display in the Event Console window:
-
Normally, the events list in the Event Console window displays the contents of Nos. 1 to 7 in the above table, but because No. 8 is mapped to No. 4 and No. 9 is mapped to No. 3, the following is displayed:
Table 5‒7: Event Console window display Severity
Registration time
Arrival time
Registered host name
User name
Event ID
Message
Error
10/25 17:47:31
# 10/25 11:29:57
# loghost_1
jp1nps
000012E0
KAJC391-E ...
To display a program-specific extended attribute, in the Event-Information Mapping Definitions window, map a display item to the program-specific extended attribute. To start the Event-Information Mapping Definitions window, you need JP1_Console_Admin permissions. In addition, when reference and operation permissions are set for a business group, operations in the Event-Information Mapping Definitions window might not be possible depending on the combination of JP1 resource group and JP1 permission level. For details, see 3.1.4(2) Assigning a JP1 resource group and permission level to a JP1 user in the JP1/Integrated Management - Manager Overview and System Design Guide.
- Note
-
Difference between event information mapping and source host mapping
The event information mapping functionality maps the value of an extended attribute of a JP1 event to the attribute of a display item in an event list, and displays it. This functionality can display another attribute value in the registered host name field of an event list. Note, however, that the functionality can be used only for changing the display of an event list. It cannot be used for event conditions, such as actions and event correlation.
The source host mapping functionality, however, registers the host name and source host name of a JP1 event acquired by JP1/IM - Manager in order to monitor and manage JP1 events. This functionality can display information in the source host name field of an event list and can also be used for event conditions, such as actions and event correlation. Note, however, that you must use the integrated monitoring database and enable source host mapping.
To map a program-specific extended attribute:
-
In the Event Console window, from the Options menu, choose Event-Information Mapping Definitions.
The Event-Information Mapping Definitions window opens.
List of definitions shows the list of mapping definition information that is currently set.
You can create a maximum of 16 mapping definitions.
-
To enable event information mapping, from the Mapping menu, choose Map.
-
To create a new mapping definition, click the Add button. To modify defined mapping information, choose an item from List of definitions and then click the Edit button, or double-click the item in List of definitions.
The Event-Information Mapping Detailed Definitions window opens.
-
From Display items & order, select the display item in the events list to which you want to map the program-specific extended attribute.
You can select (in the Preferences window) the following items:
Source process ID, arrival time, source user ID, source group ID, source user name, source group name, registered host name, source serial number, severity, user name, product name, object type, object name, root object type, root object name, occurrence, start time, and end time.
-
Specification example: registered-host-name
-
-
In Attribute name, specify the name of the program-specific extended attribute you want to map.
You can specify a maximum of 32 characters consisting of uppercase letters, numbers, and underscores. You need not specify E to indicate a program-specific extended attribute.
Each display item can be mapped to a single program-specific extended attribute.
To map a program-specific extended attribute to arrival time, start time, or end time, specify an attribute name whose attribute value is a numeric value (from 0 to 2,147,483,647 seconds from January 1, 1970 UTC). If you specify a value other than a numeric value or an attribute with a numeric value that is outside the range, the original attribute is displayed.
-
Specification example: LOGHOST
-
-
In Event ID, specify the event ID of the JP1 event you want to map.
You can specify a maximum of 1,000 characters, consisting of letters A-F or a-f, numbers, and commas. Specify the value in hexadecimal format. The range of values that can be specified is 00000000 to 7FFFFFFF.
You can specify a maximum of 100 event IDs, delimited by commas.
-
Specification example 1: 3FFF
-
Specification example 2: 12345B, 7FFFFFFF
-
-
Click the OK button.
The Event-Information Mapping Detailed Definitions window closes, and the specified content is committed to the Event-Information Mapping Definitions window.
-
In the Event-Information Mapping Definitions window, click the Apply button.
For events that arrive after the Apply button has been clicked, the program-specific extended attribute is displayed along with this mapping definition.
You can specify the mapped program-specific extended attribute to filter JP1 events when using the view filter, severe event filter, and user filter.
When a program-specific extended attribute is displayed, it is preceded by the hash mark and a space (# ).
To specify a displayed program-specific extended attribute as the filtering condition, you need not enter a hash mark and a space (# ).
In the Preferences window, if you select the Display check box of the Coloring field, the background of a line in an event list is highlighted in the color for that event level.
If you changed the settings in the Event-Information Mapping Definitions window, the change is applied to the events list of all JP1/IM - Views connected to the same JP1/IM - Manager.
To view the information prior to mapping, select the mapped event and open the Event Details window. The Event Details window displays the information prior to mapping. Note that you can use the definition file for extended event attributes to display program-specific extended attributes in the Event Details window. For details, see the following explanations:
- Using the definition file for extended event attributes to display program-specific extended attributes
-
See 3.14 Displaying user-defined event attributes in the JP1/Integrated Management - Manager Overview and System Design Guide.
- About the definition file for extended event attributes
-
See Definition file for extended event attributes in Chapter 2. Definition Files of the manual JP1/Integrated Management - Manager Command and Definition File Reference.
Note the following points when you are mapping program-specific extended attributes:
-
In an event search, because the integrated monitoring database or the event database of Event Service is searched, events before mapping are not searched. Therefore, the mapping information is not reflected in the search results. To search for mapping-target events, use Extended attribute in the Event Search Conditions window to specify the information of the program-specific extended attribute you want to map.
-
The related events displayed in the Related Events window are the result of an event search, and therefore do not reflect the mapping information.
-
If you select an event to which a program-specific extended attribute is mapped and then click the Read From Selected Event button in the Event Search Conditions window, for example, the attribute of the display item at the mapping destination and the value of the program-specific extended attribute are not input into the condition list.