4.4.6 Event list display during the suppression of repeated-event display
When repeated-event display is suppressed, the repeated events that meet the same repeated event condition are displayed as a consolidation event in the event list of the Event Console window.
The number of repeated events that are consolidated into a consolidation event is indicated in the Summary Status column. When the event list includes at least a consolidation event, the icon indicating a large number of events have occurred, appears in the Type column and on the corresponding tab of the Event Console window.
|
If the repeated events whose display is suppressed under the same repeated event condition include both severe events and non-severe events, the severe events and non-severe events are displayed as separate consolidation events.
|
- Organization of this subsection
(1) Maximum number of repeated events that can be consolidated into a consolidation event
A maximum of 1,000,000 repeated events can be consolidated into a single consolidation event. When the 1,000,001st repeated event arrives, the 1,000,001st repeated event is treated as a consolidation start event, and a new consolidation event appears in the event list.
|
(2) When the number of events and the indication of + sign (shown or hidden) are updated in the Summary Status column
The Summary Status column for an event being consolidated displays the number of repeated events consolidated into the event and the + sign indicates that the suppression of repeated-event displays continues. These indications are updated when JP1/IM - View acquires an event from JP1/IM - Manager.
|
(3) How events are displayed when an event being consolidated disappears from the event list
The event list of the Event Console window can display a maximum of 2,000 events (maximum number of events stored in the scroll buffer). After the maximum number of events stored in the scroll buffer has been reached, the oldest event disappears from the event list each time a new event to be displayed in the event list arrives. The following describes how events are displayed after an event being consolidated disappears from the event list.
Assume that JP1/IM - View acquires a new event meeting the same repeated event condition applying to the event being consolidated that disappeared. JP1/IM - View treats the newly acquired event as a consolidation start event, and displays a new event being consolidated at the bottom of the event list.
|
- When a severe event is an event being consolidated
-
While repeated-event display is suppressed, severe events disappear from the Severe Events page of the Event Console window in the following order of priority:
-
The event among the following events that is displayed at the top of the event list on the Severe Events page of the Event Console window:
- Processed events
- Consolidation events and consolidated repeated events among which the 1st (oldest) to 100th repeated events have all been processed (! is not displayed as the response status icon)
-
The event displayed at the top of the event list on the Severe Events page of the Event Console
When the same event being consolidated is displayed on both the Monitor Events and Severe Events pages, the Summary status indication for the event is the same on both pages.
Assume that a severe event being consolidated disappears from the Monitor Events page, and a new severe event meeting the same repeated event condition applying to the severe event being consolidated is acquired. The following figure shows how events are displayed on the Monitor Events and Severe Events pages in that case.
Figure 4‒45: Display on the Monitor Events and Severe Events pages -
(4) How events are displayed if the information in the Summary Status column is different between the Monitor Events and Severe Events pages when the range of events to be collected at login is specified
When repeated-event display is suppressed, the same information is displayed, in principle, in the Summary Status column on the Monitor Events and Severe Events pages. When, however, the range of events to be collected at login is specified, the number of repeated events within the range might differ between the Monitor Events and Severe Events pages. If the number of repeated events within the range differs, the information in the Summary Status column is different between the Monitor Events and Severe Events pages.
|
In the example shown in the above figure, the range of events to be collected at login differs between the Monitor Events and Severe Events pages, and, therefore, different numbers are displayed in their Summary Status columns. Also the Related Events (Summary) window displays different information for the consolidation events displayed on the Monitor Events and Severe Events pages.
(5) How to check consolidated repeated events other than the consolidation start event
You can check individual repeated events consolidated into a consolidation event in the Related Events (Summary) window. You can check the repeated events that have disappeared from the event list of the Event Console window by using the event search function. You can check those repeated events also among past events that can be displayed by moving the slider in the event display start-time specification area of the Event Console window.
- Checking the repeated events consolidated in a consolidation event
-
To open the Related Events (Summary) window, select a consolidation event on the Monitor Events or Severe Events page, right-click to open a pop-up menu, and then, from the pop-up menu, select Display Related Event List. The Related Events (Summary) window displays a maximum of 100 repeated events. The window does not display the 101st and subsequent repeated events.
To check the repeated events that are not displayed, search for those events and then check the Search Events page of the Event Console window. You can search for repeated events consolidated in a consolidation event by specifying the suppressed event ID (assigned to each consolidation event) as a search condition.
Note that, if the repeated events whose display is suppressed are correlation events and corresponding correlation source events are to be displayed, you need to open the Related Events (Correlation) window from the Related Events (Summary) window.
For details about how to check repeated events and consolidation events and change the response status, see 6.4.1 Checking detailed information about repeated events and changing the response status in the JP1/Integrated Management 2 - Manager Administration Guide.
- Note
-
The Related Events window is available in the following two types:
-
Window to display consolidation events: Related Events (Summary) window
-
Window to display correlation source events: Related Events (Correlation) window
You can open either window by selecting an event in the Event Console window, and then, from the View menu or the pop-up menu that is displayed by right-clicking, select Display Related Event List. If, however, correlation events are consolidated for display, you can open only the Related Events (Summary) window from the Event Console window.
-
- Checking the repeated events that have disappeared from the event list of the Event Console window
-
If you move the slider in the event display start-time specification area of the Event Console window, event consolidation is canceled.
Also, if you click the Previous Event button in the event display start-time specification area of the Event Console window, the event list displays the event that precedes the oldest event other than dummy events displayed in the event list. When the event list displays the preceding event, the consolidation events displayed in the event list are released from consolidation.