1.4.10 Event History window
The Event History window displays event log information for the monitoring agent. To display this window, from the method frame in the Agents window, choose Event History.
The Event History window consists of two pages:
-
View report page
-
Show Options page
If in the method frame of the Agents window, you select the Event History method, the Show Options page will be displayed. In the Show Options page, set display conditions, such as the event display period and the maximum number of events to be displayed, and then click the OK button. The Show Options page will be displayed.
The following describes each page.
- Organization of this subsection
(1) View report page
This page displays the event log information for the monitoring agent selected in the navigation frame in the Agents window. Event history is displayed in accordance with the display conditions set on the Show Options page.
The following figure shows the Event History window (View report page).
The following describes the displayed items:
- Close
-
Closes the Event History window.
- Check boxes
-
- Graph
-
Select this check box to view the graph data of a report. The check box is not available if it is not set in the report definition.
- List
-
Select this check box to view listed data of a report. The check box is not available if the viewing of data is not set in the report definition.
- Table
-
Select this check box to view the table data of a report. The check box is not available if the viewing of data is not set in the report definition.
- Data Group button
-
A data group is data grouped by the record collection time.
- button
-
Displays the most recent (newest) data or data group.
- button
-
Displays the immediately previous (newer) data or data group.
- button
-
Displays the next (older) data or data group.
- button
-
Displays the oldest data or data group.
- Link menu
-
- Refresh
-
Refreshes the information displayed in the table frame.
- Export
-
Exports to a CSV text file the data acquired for displaying the event history. Choosing this item displays a dialog box for file downloading.
-
Displays the Print Reports window as a new window.
For details about the Print Reports window, see 1.4.6 Print Reports window.
- Button for changing the report display period:
-
You can move data of the same period of time as that of the currently displayed report forward or backward by using any of the buttons below. Note that on the Show Options page, you can change the setting for the report display period in finer detail.
- button
-
Displays a report after moving the period backward for the same period of time as the currently displayed period.
- button
-
Displays a report after moving the period backward by one-half the time of the currently displayed period.
- button
-
Displays a report after moving the period forward by one-half the time of the currently displayed period.
- button
-
Displays a report after moving the period forward for the same period of time as the currently displayed period.
- Table frame
-
Displays a list of events that have occurred at the monitoring agent selected in the navigation frame in the Agents window.
The following describes the items displayed in the table frame:
- Date and Time
-
Displays the system date and time at the host of the monitoring agent where the event occurred. Note that you can select the display position by changing dateFieldCheckboxDisplay and dateFieldState in the initialization file (config.xml). For details, see Initialization file settings (config.xml).
- Agent
-
Displays the service ID of the monitoring agent.
- Host
-
Displays the host name of the monitoring agent.
- StateEx
-
Displays the event's status. For an alarm event for which State changes for each record instance is selected, this column displays an icon that indicates the status of the record instance that caused the alarm event.
One of the following is displayed:
-
OK: Normal event
-
Exception: Abnormal event
-
Warning: Warning event
-
Inactive: Inactive event or event whose status is unknown
-
Suspended: Monitoring suspended event
-
Resumed: Monitoring resumed event
-
Not Supported: Not Supported
-
Running: Running
-
Incomplete: Incomplete
-
Stopped: Stopped
-
Unconfirmed: Unconfirmed
-
Host Not Available: Host Not Available
For details about the health check status, see the chapter that explains error detection of Performance Management in the JP1/Performance Management User's Guide.
-
- Alarm Name
-
Displays the name of the alarm resulting in the event. For agent events and health check events, n/a appears.
- Alarm Table
-
Displays the name of the alarm table to which the alarm resulting in the event belongs. For agent events and health check events, n/a appears.
- Message
-
Displays the message output by the monitoring agent or the message defined in the New Alarm method in the Alarms window. The following lists the principal messages that are displayed:
For agent events:
-
Startup: PFM - Agent or PFM - RM has started.
-
Shutdown: PFM - Agent or PFM - RM has stopped.
-
State change: The status of PFM - Agent or PFM - RM has changed.
-
State change(Unconfirmed): PFM - Manager could not confirm the agent alarm status, but it inferred the status of PFM - Agent or PFM - RM from the received alarm event.
-
State information: PFM - Manager correctly confirmed the agent alarm status.
-
State information(Unconfirmed): PFM - Manager could not confirm the agent alarm status.
-
Heartbeat timeout:
The Agent Collector or Remote Monitor Collector service is busy or inactive.
-
Heartbeat detected:
The Agent Collector or Remote Monitor Collector service has recovered from the busy or inactive status.
-
Monitored System Unavailable: Operating information could not be collected because the monitored system had stopped.
-
Monitored System Available: The monitoring system recovered from not being able to collect operating information because the monitored system had stopped.
-
Suspend: Monitoring has been suspended.
-
Resume: Monitoring has been resumed.
Other than those mentioned above, a message that begins with KAV might be displayed.
If Heartbeat timeout is displayed, check the status of the PFM - Agent or PFM - RM. If a message that begins with KAV is displayed, see the chapter that explains messages in the PFM - Agent or PFM - RM manuals. There is no need to take any action for other messages because they are not error messages.
For alarm events:
The meaning of messages depends on the setting of alarmCompatibleMode, an item in the initialization file (config.xml) used to set the PFM - Web Console operating environment:
• Alarm updated/deleted
• Alarm deactivated
For details about alarmCompatibleMode, see Initialization file (config.xml).
When alarmCompatibleMode does not exist:
• Alarm updated/deleted: Alarm definition was updated or deleted.
• Alarm deactivated: The alarm is no longer active.
When alarmCompatibleMode is true:
• Alarm updated/deleted: The alarm definition was deleted.
• Alarm deactivated: The alarm is no longer active, or the alarm was updated and the previous alarm status was initialized.
When alarmCompatibleMode is false:
The meaning of the messages depends on the PFM - Manager version.
When the PFM - Manager version is 09-10-19 or later:
• Alarm updated/deleted: The alarm definition was deleted.
• Alarm deactivated: The alarm is no longer active, or the alarm was updated and the previous alarm status was initialized.
When the PFM - Manager version is earlier than 09-10-19:
• Alarm updated/deleted: The alarm definition was updated or deleted.
• Alarm deactivated: The alarm is no longer active.
-
State changed(No instance data): The status of an instance changed, but there is no data on the instance.
In the case of multi-instance records, the following processing occurs:
-
When a value in the abnormal or warning range is detected for at least one of the target instances:
The user-defined message set in the alarm definition is displayed in Message. If a performance data measurement value is set to be displayed in the message text, the value of the instance exceeding the threshold is set.
-
When the status recovers from abnormal or warning to normal:
If the function for measurement value output at alarm recovery is enabled, the user-defined message set during alarm definition is displayed in Message. In addition, if you set that the measurement value of performance data is to be displayed in Message, the current measurement value of the instance that triggered issuance of the last error or warning alarm is set.
If this functionality is disabled, a normal event is issued, but all instance values are in the normal range, and the value that triggered issuance of the event cannot be identified. As a result, nothing is displayed in Message.
For details about the function for measurement value output at alarm recovery, see the chapter that explains operation monitoring by using alarms in the JP1/Performance Management User's Guide.
For health check events:
Message text is displayed in HC: health-check-status format.
In addition, message text indicating the operating status of the service is displayed after the operating status of the agent. For details about display rules and examples of message texts, see the section that explains the health check agent in the appendix of the JP1/Performance Management Planning and Configuration Guide.
-
- First button
-
Displays the first page. If there are no preceding pages, this button is disabled.
- Previous button
-
Displays the previous page. If there are no preceding pages, this button is disabled.
- Data number
-
Displays the page identifier in the format first-data-number-on-the-current-page - last-data-number-on-the-current-page OF total-number-of-data-items.
Example: 5-24 OF 50
- Next button
-
Displays the next page. If there are no following pages, this button is disabled.
- Last button
-
Displays the last page. If there are no following pages, this button is disabled.
(2) Show Options page
This page is used to set the display conditions for the displays on the View report page, such as the event history display period and the maximum number of event histories to be displayed. The display conditions set on this page remain in effect only for as long as the Event History window is displayed, and cannot be saved.
The following figure shows the Event History window (Show Options page).
The following describes the items displayed on this page:
- Close
-
Closes the Event History window.
- OK button
-
Sets the specified settings and returns to the View report page. Event histories are displayed on the View report page according to the display conditions you have specified.
- Cancel button
-
Discards the specified settings and returns to the View report page.
- Settings for the report display period
-
Specifies the period for which data is to be displayed as the event history in the View report page. The available settings are as follows:
- Date range
-
From the pull-down menu, select the period for displaying events.
Available values are as follows:
-
Specify when displayed
-
Within the past hour
-
Within the past 24 hours
-
Within the past 7 days
-
Within the past month
-
Within the past year
The default is Within the past 24 hours.
If a value other than Specify when displayed is selected, the appropriate dates and times are set automatically in Start time and End time.
-
- Start time and End time
-
When you selected Specify when displayed in Date range, enter a start date and time and an end date and time for event display.
Specify Start time and End time in the format MM DD YYYY hh:mm (YYYY: year, MM: month, DD: date, hh: hour, mm: minute).
The permitted date and time range is from 01-01-1971 00:00 to 12-31-2035 23:59. The date and time set in End time must be later than the date and time set in Start time.
If you selected a date range other than Specify when displayed, the appropriate dates and times are set automatically. If you change an automatically set date and time, the Date range setting changes to Specify when displayed.
- Display the start time data and Display the end time data
-
Switches between displaying and hiding the data that matches the date and time you specified in Start time or End time for the data that will be displayed in a report. By default, these check boxes are selected. You can set the default selection status in excludeTerminalData (under the <vsa> tag) of the initialization file (config.xml). For details about the initialization file (config.xml), see Initialization file (config.xml).
If both check boxes are selected, data that matches the date and time you specified in Start time or End time is displayed.
If both check boxes are cleared, data that matches the date and time you specified in Start time or End time is not displayed.
- Maximum number of records
-
Specify the maximum number of events to be displayed as the event history in the View report page, in the range of 1 to 1440. The default is 1000.
You can specify in PFM - Web Console's initialization file (config.xml) the maximum number of records (maxFetchCount) in the range of 1 to 2147483647. In this case, you can only specify in Maximum number of records a value that is within the range specified in the config.xml file.
- Filter
-
You can set conditions for displaying event history items. The available settings are as follows:
- Alarm Name
-
Specify the alarm name of the event to be displayed by a character string that consists of single-byte or two-byte characters and that is no more than 2,048 bytes. For any alarm name specified by this item, all events resulting in the specified alarm are displayed.
As a default, * (asterisk) is set as a wildcard.
- Alarm Table
-
Specify the alarm table name of the event to be displayed by a character string that consists of single-byte or two-byte characters and that is no more than 2,048 bytes. For any alarm table name specified by this item, all events resulting in any of the alarms in the specified alarm table are displayed.
As a default, * (asterisk) is set as a wildcard.
- Message
-
Specify the message text of the event to be displayed by a character string that consists of single-byte or two-byte characters and that is no more than 2,048 bytes. For any message text specified for this item, all events that output the specified message text are displayed.
As a default, * (asterisk) is set as a wildcard.