3.25 Event Search Conditions window

The Event Search Conditions window is used to specify the search conditions for JP1 events. The search results are displayed on the Search Events page of the Event Console window. The Event Search Conditions window is displayed when the user chooses View from the menu bar of the Event Console window and then chooses Search Events. The last search conditions specified in the Event Search Conditions window are saved and displayed when the window is displayed the next time.

When the user specifies search conditions and clicks the OK button, the specified conditions are converted into a filter condition statement that JP1/IM - View uses to perform the search. The maximum length of the filter condition statement is 64 KB. However, when the event service version of the host to be searched is 06-00 or earlier, the maximum length is 4 KB. If the filter condition statement is longer than the maximum length, an error dialog box displaying the message KAVB0246-E appears when the OK button is clicked. If the error dialog box appears, the filter condition settings must be reviewed. For details about how to estimate the length of a filter condition statement, see the Release Notes for JP1/IM - View.

If no conditions (items under Conditions) have been specified for one or more of the pass-conditions groups set in this window, all JP1 events will be displayed (acquired). On the other hand, if no conditions (items under Conditions) have been specified for one or more of the exclusion-conditions groups set in this window, no JP1 events will be displayed (acquired). At least one condition must be specified for each condition group in order to filter events.

Restrictions on the search function by JP1/Base versions

• If the version of the JP1/Base event service on the host to be searched is 06-51 or earlier, the following searches cannot be performed:

  - A Search with Regular expression selected

  If the version of the JP1/Base event service on the host to be searched is 06-00 or earlier, in addition to the above search, the following searches cannot be performed:

  - A Search with Is contained or Is not contained selected

  - A Search with multiple event statuses selected on the Severe Events page

• If the version of the JP1/Base event service on the host to be searched is 08-00 or earlier, a search with exclusion-conditions specified cannot be performed.

Note

• Some of the items displayed in the Event Search Conditions window change if linkage with BJEX or JP1/AS is enabled. For details on the contents of the Event Search Conditions window when linkage with BJEX or JP1/AS is enabled, see 3.44.7 Event Search Conditions window.

• For information about the conditions required when searching for events, see 4.6.2 Event search conditions in the JP1/Integrated Management 2 - Manager Overview and System Design Guide.

The following figure shows an example of the Event Search Conditions window in an environment that does not use the integrated monitoring database:

Figure 3‒52: Event Search Conditions window

The following figure shows an example of the Event Search Conditions window in an environment that uses the integrated monitoring database:

Figure 3‒53: Event Search Conditions window (when using integrated monitoring database)

The following describes the items displayed in the Event Search Conditions window.

Search object

This area appears in environments that use the integrated monitoring database. You can specify the integrated monitoring database or the event database as the target of the search. The last database you searched is selected by default. If you are conducting a search for the first time, Integrated monitoring database is selected.

Search host

In this text box, specify one of the following values:

• Name of the host on which JP1 events will be searched for (search-target event server name)

• (If the function for restricting reference permissions and operation permissions is enabled (ON is set for the -bizmonmode option of the jcoimdef command)) Name of the host belonging to a business group that the logged-in JP1 user can view (host name (domain name) managed by IM configuration management)

  For details about the jcoimdef command, see jcoimdef in 1. Commands in the manual JP1/Integrated Management 2 - Manager Command, Definition File and API Reference.

• IPv4 address

• IPv6 address

The default is the name of the connected host. Note that when the integrated monitoring database is used, if the Event database radio button is selected in the Search object area, the host name specified last time as the name of the host to be searched is displayed. In addition, if the Integrated monitoring database radio button is selected in the Search object area, the user cannot specify Search host. Instead, the name of the host to which the user is logged in is specified.

If the user changes the radio button selection from Event database to Integrated monitoring database, and then selects the Event database radio button again, the name of the host specified the first time the user selected the Event database radio button is displayed in the Search host area.

Search direction

Specifies the direction of the JP1 event search.

When Past direction is selected, JP1/IM - View searches the event database (or the integrated monitoring database if the user has selected the Integrated monitoring database radio button in the Search object area) from the last (most recent) JP1 event to the first (oldest) JP1 event.

When Future direction is selected, JP1/IM - View searches the event database (or the integrated monitoring database if the user has selected the Integrated monitoring database radio button in the Search object area) from the first (oldest) JP1 event to the last (most recent) JP1 event.

The default is Past direction.

Show List (or Hide List)

Clicking the Show List button displays the list of condition groups. When the list is displayed, the button changes to the Hide List button, which, if clicked, hides the list.

Pass-conditions groups

This area displays the pass-conditions groups. If the user selects a condition group from the list, the name of the selected group is displayed in the Condition group name area, and the condition settings are displayed in the Conditions area. The user can edit these condition settings.

A maximum of five condition groups can be set. When five condition groups have been specified, the Add and Copy buttons are disabled.

Exclusion-conditions group

This area displays the exclusion-conditions groups. If the user selects a condition group from the list, the name of the selected group is displayed in the Condition group name area, and the condition settings are displayed in the Conditions area. The user can edit these condition settings.

A maximum of five condition groups can be set. When five condition groups have been specified, the Add and Copy buttons are disabled.

Add

Clicking this button adds a new condition group. For pass-conditions groups, the default name Condition group n (n is a number) is assigned to the new pass-conditions group that is added. For exclusion-conditions groups, the default name Exclusion-conditions group n (n is a number) is assigned to the new exclusion-conditions group that is added. Each time a new condition group is added, the focus moves to the text box in the Condition group name area so that the user can assign a name.

Copy

Clicking this button copies the selected condition group. When the user selects a condition group and clicks this button, a new condition group in which the same conditions as those defined in the selected condition group is created. The new condition group that is created is assigned the default name Copy original-condition-group-name, and is added to the list of condition groups. After creating a copy of a condition group, if the user creates another copy of the same condition group, a number is added after the string Copy in CopyN original-condition-group-name (N is a number). The first number used is 2, which is incremented each time the same condition group is copied. Note that each time a new condition group is added to the list, the focus moves to the text box in the Condition group name area so that the user can assign a name.

Delete

Clicking this button deletes the selected condition group. When this button is clicked, a message dialog box displaying the following message appears:

KAVB0257-I

Clicking the Yes button in the message dialog box deletes the selected condition group.

Condition group name

This box is used to specify the name of a condition group.

If the user selects an existing condition group in the Pass-conditions groups or Exclusion-conditions group area and specifies a new name, the condition group is renamed. The same name cannot be specified for a pass-conditions group and an exclusion-conditions group.

If the user attempts to specify a condition group name that already appears in the Pass-conditions groups or Exclusion-conditions group area, a message dialog box displaying the following message appears:

KAVB0256-E The specified condition group name already exists.

Clear

Clicking this button clears all condition settings displayed under Conditions. If no conditions are listed, this button is disabled.

Read From Selected Event

Clicking this button applies the attribute values of the JP1 event selected in the Event Console window to the corresponding items under Conditions. The following describes how the attribute values are applied:

• When an event attribute value includes a control character (such as a linefeed or tab character)

  The part before the first control character is applied. If an option condition can be specified for the event attribute, First characters is selected.

• When an event attribute value does not include a control character

  The entire event attribute value is applied. If an option condition can be specified for the event attribute, Match is selected.

If the information of the selected JP1 event is mapped in the Event-Information Mapping Definitions window, the attribute values for the display items and program-specific extended attribute values that have been mapped are not applied. For details about the Event-Information Mapping Definitions window, see 6.9.2 Displaying extended attributes of JP1 events (mapping of event information) in the JP1/Integrated Management 2 - Manager Administration Guide.

Read Suppressed Event ID From Selected Event

If the repeated event monitoring suppression function is enabled, the Read Suppressed Event ID From Selected Event button is displayed.

If the JP1 event selected in the Event Console window is a repeated event, the Read Suppressed Event ID From Selected Event button is enabled.

When the Read Suppressed Event ID From Selected Event button is clicked, the Suppressed event ID conditions are set as follows:

• The check box is selected.

• The suppressed event ID of the JP1 event selected in the Event Console window (E.JP1_IMSUPPRESS_ID) is set in the text box.

• Match is selected as an optional condition.

When the Read Suppressed Event ID From Selected Event button is clicked, the conditions other than Suppressed event ID are set as follows:

• The check boxes are cleared.

• If the event attribute value includes control characters such as line breaks and tabs:

  The string up to the first control character is used as the value of the condition. If an optional condition can be specified for the event attribute, First characters is selected.

• If the event attribute value does not include control characters such as line breaks and tabs:

  The entire event attribute value is used. If an optional condition can be specified for the event attribute, Match is selected.

Note that if the information about the selected JP1 event is mapped in the event-information mapping definitions, the attribute values and program-specific extended attribute values of the mapped display item are not entered into the conditions list. For details about the event-information mapping definitions, see 6.9.2 Displaying extended attributes of JP1 events (mapping of event information) in the JP1/Integrated Management 2 - Manager Administration Guide.

Event source host name

The Event source host name field appears if the event source host mapping function is enabled.

This field specifies the host name of the host where the event that triggered the JP1 event occurred. How to specify multiple hosts is the same as the Source host field.

Alphabetic characters are case sensitive. However, if ON is set for the -ignorecasehost option of the jcoimdef command, case is ignored (unless Regular expression is selected in the drop-down list on the right).

From the drop-down list on the right, you can select a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression.

If the integrated monitoring database and the IM Configuration Management database are enabled, a business group name in path format can be specified as an event source host name. In this case, Match or Does not match can be selected as a condition. If these databases are disabled and the selected condition is not Match or Does not match, business group names in path format are treated as host names.

For details on the event source host mapping function, see 4.9 Mapping of the event source hosts in the JP1/Integrated Management 2 - Manager Overview and System Design Guide.

Source host

Specifies the name of a host (event server name) that issues a JP1 event. Multiple host names require a comma as a separator. A maximum of 100 host names can be specified. If a character string that includes a comma (,) or backslash (\) is specified, a backslash (\) must be added before the comma (\,) or backslash (\\). A linefeed or tab character cannot be specified.

Alphabetic characters are case sensitive. However, if ON is set for the -ignorecasehost option of the jcoimdef command, case is ignored (if Regular expression is not selected in the drop-down list on the right).

From the drop-down list on the right, you can select a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression.

If Regular expression is selected, only one condition can be set.

For Source host, if the integrated monitoring database and the IM Configuration Management database are enabled, a business group name can also be specified in path format. Either Match or Does not match can be selected as a condition. If these databases are disabled and the selected condition is not Match or Does not match, a business group name specified in path format is treated as a host name.

Event level

Specifies the severity levels of the JP1 events to be defined as severe events from Emergency, Alert, Critical, Error, Warning, Notice, Information, and Debug.

Object type

Specifies the object type of a JP1 event. The character string can be typed in the text box or selected from the drop-down list.

Alphabetic characters are case sensitive.

From the drop-down list on the right, the user selects a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression.

Object name

Specifies the object name of a JP1 event. Multiple object names require a comma as a separator. A maximum of 100 object names can be specified. If a character string that includes a comma (,) or backslash (\) is specified, a backslash (\) must be added before the comma (\,) or backslash (\\). A linefeed or tab character cannot be specified.

Alphabetic characters are case sensitive.

From the drop-down list on the right, the user selects a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression.

If Regular expression is selected, only one condition can be set.

Root object type

Specifies the root object type of a JP1 event. The root object type can be typed in the text box or selected from the drop-down list.

Alphabetic characters are case sensitive.

From the drop-down list on the right, the user selects a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression.

Root object name

Specifies the root object name of a JP1 event.

From the drop-down list on the right, the user selects a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression.

Occurrence

Specifies the occurrence type of a JP1 event.

Alphabetic characters are case sensitive.

From the drop-down list on the right, the user selects a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression.

User name

Specifies the user name of a JP1 event.

Multiple user names require a comma as a separator. A maximum of 100 user names can be specified. If a user name that includes a comma (,) or backslash (\) is specified, a backslash (\) must be added before the comma (\,) or backslash (\\). A linefeed or tab character cannot be specified.

Alphabetic characters are case sensitive.

From the drop-down list on the right, the user selects a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression.

If Regular expression is selected, only one condition can be set.

Message

Specifies the message text of a JP1 event.

Alphabetic characters are case sensitive.

From the drop-down list on the right, the user selects a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression. We recommend First characters or Is contained. If Regular expression is selected, make sure that control characters used in the message text are not included in the expression.

Product name

Specifies the name of the program that issues a JP1 event.

Alphabetic characters are case sensitive.

From the drop-down list on the right, the user selects a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression.

Event ID

Specifies the event ID of a JP1 event. Multiple event IDs require a comma as a separator.

From the drop-down list on the right, the user selects a condition for the specified character strings from Match and Does not match.

Start timeframe

Specifies the search range for JP1 events as a timeframe based on a start time. The search range is determined by using this base time and either a period or a specific time.

To use a period to specify the search range, the user first enters the base time after From:. Next, the user selects Period: and specifies a time period (in minutes, hours, or days) before or after the base time.

To use a time to specify the search range, the user first enters the base time after From:. Next, the user selects Time: and specifies a date and time.

The current date and time can be set as the base time by clicking the Current Time button.

End timeframe

Specifies the search range for JP1 events as a timeframe based on an end time. The search range is determined by using this base time and either a period or a specific time.

To use a period to specify the search range, the user first enters the base time after From:. Next, the user selects Period: and specifies a time period (in minutes, hours, or days) before or after the base time.

To use a time to specify the search range, the user first enters the base time after From:. Next, the user selects Time: and specifies a date and time.

The current date and time can be set as the base time by clicking the Current Time button.

Registered timeframe

Specifies the search range for JP1 events as a timeframe based on the time at which JP1 events were registered in the event database on the event-issuing host. The search range is determined by using this base time and either a period or a specific time.

To use a period to specify the search range, the user first enters the base time after From:. Next, the user selects Period: and specifies a time period (in minutes, hours, or days) before or after the base time.

To use a time to specify the search range, the user first enters the base time after From:. Next, the user selects Time: and specifies a date and time.

The current date and time can be set as the base time by clicking the Current Time button.

Arrived timeframe

Specifies the search range for JP1 events as a timeframe based on the times at which JP1 events arrived at the host where the search will be performed. The search range is determined by using this base time and either a period or a specific time.

To use a period to specify the search range, the user first enters the base time after From:. Next, the user selects Period: and specifies a time period (in minutes, hours, or days) before or after the base time.

To use a time to specify the search range, the user first enters the base time after From:. Next, the user selects Time: and specifies a date and time.

The current date and time can be set as the base time by clicking the Current Time button.

Status

Specifies the event statuses of JP1 events as search conditions. Multiple statuses can be specified. If the user selects Processed, only events whose status is set to Processed are retrieved. If the user selects Unprocessed, only events whose status is set to Unprocessed are retrieved. If the user selects Processing, only events whose status is set to Processing are retrieved. If the user selects Held, only events whose status is set to Held are retrieved.

Action

For JP1 events for which an automated action is defined, this item enables a search based on whether the defined automated action has been executed.

When linkage with JP1/IM - Rule Operation has been set up, the Action area is expanded to display the additional options shown below.

When linkage with JP1/IM - Rule Operation has been set up, the action type can be specified as a filter condition. For details about the setup for linkage with JP1/IM - Rule Operation, see 10.3.1 Settings for enabling the JP1/IM - Rule Operation linkage function in the JP1/Integrated Management 2 - Manager Configuration Guide.

Extended attribute

When the user specifies specific extended attribute values as search conditions, clicking the Configure button displays the Event Search Conditions (Program-Specific Information in Extended Attribute) window.

Memo

If the function for setting memo entries is enabled, the Memo area is displayed. This area is unavailable if you select the event database in the Search object area.

In this area, the user specifies memo entries for JP1 events.

Alphabetic characters are case sensitive.

From the drop-down list on the right, select a condition for the specified character strings from First characters, Match, Does not match, Is contained, Is not contained, and Regular expression.

For details on the function for setting memo entries, see 4.11 Setting memo entries in the JP1/Integrated Management 2 - Manager Overview and System Design Guide.

New severity level

If the function for changing the severity level is enabled, the New severity level area is displayed. This area is unavailable if the event database is selected in the Search object area.

In this area, you can specify whether to include JP1 events with new severity levels in the scope of the search. If you select the Target radio button, the search targets JP1 events whose severity level has changed. If you select the the Not target radio button, the search targets JP1 events whose severity level has not changed.

For details on the function for changing the severity level, see 5.13 Setting the severity changing function in the JP1/Integrated Management 2 - Manager Configuration Guide.

Original severity level

If the function for changing the severity level is enabled, the Original severity level area is displayed. This area is unavailable if the event database is selected in the Search object area.

In this area, you can specify the severity level of the JP1 event before the level was changed. You can select Emergency, Alert, Critical, Error, Warning, Notice, Information, and Debug.

New display message

If you enable the display message change function, the New display message area is displayed.

In addition, this area is always unavailable if you have not used the jimdbupdate command to update the IM database after performing an upgrade installation from version 10-50 or earlier.

Specify the condition whether to display the messages that are changed or the messages that are not changed. If you select the Target radio button, JP1 events whose messages to be displayed are changed, are to be searched. If you select the Not target radio button, JP1 events whose messages to be displayed are not changed, are to be searched.

For details about the display message change function, see 5.14 Setting the display message change function in the JP1/Integrated Management 2 - Manager Configuration Guide.

Changed display message

If you enable the display message change function, the Changed display message area is displayed.

In addition, this area is always unavailable if you have not used the jimdbupdate command to update the IM database after performing an upgrade installation from version 10-50 or earlier.

Specify the changed display message text for JP1 events.

From the drop-down list on the right, the user selects a condition for the specified character strings from Match, Does not match, First characters, Is contained, Is not contained, and Regular expression.

Repeated event

If the repeated event monitoring suppression function is enabled, the Repeated event area is displayed. This area is unavailable if the event database is selected in the Search object area.

In this area, you can specify whether to include repeated events in the search results. When you select the check box, the Target and Not target radio buttons become available. If you do not select the check box, the radio buttons remain unavailable. This area does not appear if you log in to an instance of JP1/IM - Manager in which the repeated event monitoring suppression function is disabled.

Specify whether to include repeated events in the search results. To include repeated events in the search results, select the Target radio button. To exclude repeated events, select the Not target radio button.

For details on the repeated event monitoring suppression function, see 5.3 Setting monitoring of repeated events to be prevented in the JP1/Integrated Management 2 - Manager Configuration Guide.

Suppressed event ID

If the repeated event monitoring suppression function is enabled, Suppressed event ID is displayed. This item is disabled if the event database is selected as the search-target database.

Specify the suppressed event ID of a JP1 event (E.JP1_IMSUPPRESS_ID). The same suppressed event ID is set for the repeated events that are consolidated into a single consolidation event. Therefore, you can specify a suppressed event ID to search for the repeated events related to a specific repeated event.

You can also specify multiple suppressed event IDs by using a comma (,) as a separator. You can specify a maximum of 100 suppressed event IDs. You cannot use a line break or tab.

From the list box on the right of this item, select one of the following options as the search condition to be applied to the specified character string: First characters, Match, Does not match, Is contained, Is not contained, or Regular expression. Note that you cannot specify multiple suppressed event IDs if you select Regular expression.

To Page Top