4.15.1 Saving event listings (CSV snapshot)

In JP1/IM, you can take a CSV snapshot^# of the event information displayed in JP1/IM - View. Based on this information, you can keep a history of day-to-day monitoring and actions. You can also use your CSV snapshots when reviewing the system during maintenance, for example.

The following describes the types of information you can export as a CSV snapshot, and the output format, items, and timing.

#: Snapshot refers to extracting information at a particular point in time.

Organization of this subsection

(1) Information that can be exported as a snapshot
(2) Snapshot image and format
(3) Snapshot output items
(4) Snapshot timing

(1) Information that can be exported as a snapshot

You can take a CSV snapshot of the event lists in following pages:

Monitor Events page of the Event Console window
Severe Events page of the Event Console window
Search Events page of the Event Console window
Response-Waiting Events page of the Event Console window

To Page Top

(2) Snapshot image and format

The following figure shows a CSV snapshot.

Figure 4‒93: CSV snapshot image of events list information

Line 1 is the CSV header information, separated by commas.

Line 2 is the display items set in JP1/IM - View, separated by commas and output in order of display from left to right. You can set the display items of JP1/IM - View on the Event Attributes page of the Preferences window.

Line 3 is the event information listed first in the window, separated by commas in the same way as the display items (line 2).

Line 4 and subsequent lines are event information output in the same format as line 3, following the window display items.

The CSV output format is as follows:

Items are separated by commas (,).

item1,item2,item3,item4,item5,...
Any item containing a comma (,) is enclosed with double quotation marks (").

item1,"item,2",item3,item4,item5,...
Any item containing a control character (0x00 to 0x1F, and 0x7F to 0x9F) is enclosed with double quotation marks (").

item1,"item(0x00)2",item3,item4,item5,...
When an item contains a double quotation mark ("), another double quotation mark is inserted before it, and the whole is enclosed with double quotation marks (").

item1,"item""2",item3,item4,item5,...
Empty items are shown as blank (nothing is entered).

item1,,item3,item4,item5,...

To Page Top

(3) Snapshot output items

The following table describes the header information output to line 1 of a CSV snapshot.

Table 4‒20: Output header information
Header item	Output contents
Output time	The time at which the snapshot was taken is output in the following format (year/month/day hour:minute:second): When the attribute value is the cumulative number of seconds from 1970/01/01 00:00:00 (GMT): The attribute value is converted for the time zone set for JP1/IM - View in the `YYYY/MM/DD` `hh:mm:ss` format and output. When the attribute value is other than the above: The character string set as the attribute value is output.
Login user name	The name of the JP1 user who took the CSV snapshot
Host connection	The name of the manager host to which the JP1 user was logged in when the snapshot was taken
Window name	The name of the page (Monitor Events, Severe Events, or Search Events) displayed in the Event Console window when the snapshot was taken

The contents (display items) output to line 2 of the snapshot differs according to the settings in the JP1/IM - View Preferences window. The contents (event information) output to line 3 and subsequent lines also differs according to the contents in line 2.

The following table describes the contents output to line 2 and subsequent lines.

Table 4‒21: Contents output to the body of a snapshot
Display item (contents in line 2)	Event information (contents in line 3 onward)	Output conditions
Response status	The icons in the window are converted into character strings and output as follows: -> `Processed` -> `Processing` -> `Held` (no icon) -> `Unprocessed` When the response status differs among the JP1 events in a consolidation event, the icon is followed by an exclamation mark (!). In the snapshot, the exclamation mark appears to the right of the string. When a JP1 event has a memo entry, the icon and exclamation mark are followed by a comma and then `Memo`.	--
Summary status	The character strings displayed in the window are output as is.	Output when Enable is selected for Display most significant status in the Preferences window (that is, when the consolidated display of repeated events is used) and the repeated-event monitoring suppression function is enabled.
Event level	The character strings displayed in the window are output as is. The severity color coding and icons are not output.	Output when this item is set in the Display items & order list box in the Preferences window.
Original severity level
New severity level	The icon in the window is converted into a character string and output as follows: New severity level flag -> `Changed` (no icon) -> (blank)
Start time	Output in the following format: When the attribute value is the cumulative number of seconds from 1970/01/01 00:00:00 (GMT): The attribute value is converted for the time zone set for JP1/IM - View in the `YYYY/MM/DD` `hh:mm:ss` format, and then output. When the attribute value is other than the above: The character string set as the attribute value is output.
End time
Arrived time
Registered time
Source host	The character strings displayed in the window are output.
User name
Message
Event ID
Product name
Object type
Object name
Root object type
Root object name
Occurrence
Serial number
Source process ID
Source user ID
Source group ID
Source user name
Source group name
Source serial number
Event source host name
Action	The icons in the window are converted into character strings and output as follows: -> `Execute` -> `Partially` `suppress` -> `Suppress` -> `Repeated` `event` -> `Action-excluded event` (no icon) -> (blank) When the action status differs among the JP1 events in a consolidation event, the icon is followed by an exclamation mark (!). In the snapshot, the exclamation mark appears to the right of the string.
Type	The icons in the window are converted into character strings and output as follows: -> `Complete-correlations` `event` -> `Incomplete-correlations` `event` -> `Repeated` `event` -> `Repeated` `event`, `complete-correlations` `event` -> `Repeated` `event`, `incomplete-correlations` `event` (no icon) -> (blank)
Action type	The icons in the window are converted into character strings and output as follows: -> `Command` -> `Rule` -> `Command,Rule` (no icon) -> (blank)
Message (after change)	The character strings displayed in the window are output as is.
Display message change	The icons in the window are converted into character strings and output as follows: Display message change flag `->` Changed (no icon) `->` (blank)
Display message change definition	The character strings displayed in the window are output as is.
Program-specific extended attribute	The character strings displayed in the window are output as is.	Output if the attribute is defined in the definition file for extended event attributes (extended file) and this item is set in Display items & order in the Preferences window.

Legend:: --: None.

When a program-specific extended attribute is mapped to a display item in the event-information mapping definitions, the attribute value is output to the snapshot in the same format as displayed in the Event Console window (value prefixed with # followed by a space).

If there are no events displayed in the window, only the header information (line 1) and the display items (line 2) will appear in the snapshot. If there is no information for a particular display item, that field is blank.

If the character string is a control character, it is converted into a space when displayed in the window, but appears as is when output to a CSV snapshot.

To Page Top

(4) Snapshot timing

To take a CSV snapshot, choose File and then Save Displayed Events in the Event Console window. The currently displayed event information is captured in the snapshot.

Important

By default, the event information displayed in the Monitor Events page and Severe Events page of the Event Console window is automatically refreshed at 5-second intervals.

To stop the event information from being refreshed automatically when taking a snapshot, in the Preferences window change Automatic refresh from Apply to Do not apply.
You cannot export CSV snapshot files to a removable medium.

To Page Top