1.3.2 Event Monitor window

(1) View report page

This page displays information about the events that have occurred on the monitoring agents. On the Show Options page of the Event Monitor Settings window, you can set display conditions, including the agents for which you want to display events, and the maximum number of items to be displayed.

The following figure shows the Event Monitor window (View report page).

Figure 1‒4: Event Monitor window (View report page)

The following describes the items displayed on this page:

View

Enables you to select from the pull-down menu, the type of events to be displayed in the table frame. The following event types are available:

• All events

• Agent events

• Alarm events

• Health check events

• Health check statuses

The default is All events. When you select Health check statuses, only the icons, agents, host names, and status are displayed.

Refresh

Refreshes the information displayed in the table frame.

Table frame

Displays a list of the events of the event type selected in View.

The following describes the items displayed in the table frame:

Event status icons

An icon indicates each event's status. The following explains the event status icons that can be displayed for each event type selected with View:

• Agent events

  An agent event indicates the status of an agent. An agent event is issued when the status of an agent that is bound to an alarm table changes.

  The event status icons have the meanings described below. The meanings vary by the product (PFM - Agent or PFM - RM).

  : Normal, inactive status (status unknown)

  : Warning status

  : Abnormal status

  : Monitoring suspended status

  If monitoring is resumed, the icon corresponding to the alarm status of the agent at the time is displayed.

  Caution:

  - If Always notify is selected in the alarm definition, no agent event is issued because changes of agent status are not monitored.

  - If an agent is added to or deleted from a host where monitoring is suspended, the event is displayed by the icon that indicates the normal status, but actually monitoring is suspended. You can check the correct status from the icon in the navigation frame.

• Alarm events

  An alarm event indicates the status of an event with an icon. An alarm event is issued when the threshold for a warning or an abnormality is reached. The event status indicated varies as follows according whether State changes for each record instance is selected:

  When State changes for each record instance is selected:

  An icon is displayed to indicate the status of the instance of a record for which an alarm event occurred.

  When State changes for each record instance is not selected:

  An icon is displayed to indicate the status of an alarm that caused the alarm event.

  (green): Normal event

  (yellow): Warning event

  (red): Abnormal event

  ^#: Abnormal or warning event

  #: This icon is displayed only if Always notify is selected in the alarm definition.

• Health check events or health check status:

  A health check event is issued when a health check status changes. The following show the health check status icons and their meanings:

  : Not Supported

  : Running

  : Monitoring suspended

  : Incomplete

  : Stopped

  : Unconfirmed

  : Host Not Available

  For details about the health check status, see the chapter that explains error detection of Performance Management in the JP1/Performance Management User's Guide.

Example of displaying alarm notifications of state changes for each instance is specified:

When notification of state changes for each instance is specified, alarm event icons and alarm name icons are displayed separately in the Event Monitor window. The following describes the status indicated by icons for the notification of state changes for each instance:

• Alarm event icon

  This icon indicates the status of an instance.

• Alarm name icon

  This icon indicates the status of an alarm.

The following describes an example of displaying information for a multi-instance record that has instance 1 (Disk C:) and instance 2 (Disk E:):

Instance 1 (Disk C:) of the record is now in an abnormal status, and an alarm is thereby generated. Assume that a warning event is issued for instance 2 (Disk E:) of the record. The following figure shows an example of displaying alarm information (on the View report page) in the Event Monitor window in such a case.

Figure 1‒5: Example of display when notification of state changes for each instance is specified

Because instance 2 (Disk E:) is in the warning status, the alarm event icon is displayed in yellow and the Status column displays Warning.

The alarm status of each instance is as follows:

Record instance 1 (Disk C:): Abnormal status

Record instance 2 (Disk E:): Warning status

Because the abnormal status for instance 1 (Disk C:) is at a high severity level, the alarm name icon for instance 1 turns to red.

Date and Time

Displays the system date and time (according to the locale) at the agent where the event occurred. For details, see the chapter that explains installation and setup in the JP1/Performance Management Planning and Configuration Guide.

Agent

Displays the service ID of the monitoring agent where the event occurred.

Host

Displays the host name of the monitoring agent where the event occurred. For a remote agent, the monitoring host name is displayed. For a group agent, the primary host name is displayed.

Status

Displays the event's status; one of the following is displayed:

For agent events and alarm events:

• OK: Normal event

• Exception: Abnormal event

• Warning: Warning event

• Inactive: Inactive event or event whose status is unknown

• Suspended: Monitoring suspended event

• Resumed: Monitoring resumed event

For health check events:

• Not Supported: Not Supported

• Running: Running

• Incomplete: Incomplete

• Stopped: Stopped

• Unconfirmed: Unconfirmed

• Host Not Available: Host Not Available

Report

Displays whether there is a report associated with the event. If there is an associated report, clicking the report icon displays related reports. The meanings of items displayed and icons are described below. The icons vary by the product (PFM - Agent or PFM - RM).

• n/a: There is no report (for an agent event or a health check event)

• -: There is no report (for an alarm event)

• : There is a report (Windows)

• : There is a report (UNIX)

Alarm name

Displays an alarm status icon and the name of the alarm resulting from the event. For an agent event or a health check event, n/a is displayed.

Clicking the icon in the Alarm name column opens the Properties window, where you can check the content of the alarm definition.

(green): Normal status

(yellow): Warning status

(red): Abnormal status

^#: Abnormal or warning status

#: This icon is displayed only if Always notify is selected in the alarm definition.

Alarm table

Displays the name of the alarm table to which the alarm resulting in the event belongs. For an agent event or a health check event, n/a is displayed.

Message

Displays the message output by the monitoring agent or the message defined in the New Alarm method in the Alarms window. The following lists the main messages that are displayed:

For agent events:

• Startup: PFM - Agent or PFM - RM has started.

• Shutdown: PFM - Agent or PFM - RM has stopped.

• State change: The status of PFM - Agent or PFM - RM has changed.

• State change(Unconfirmed): PFM - Manager could not confirm the agent alarm status, but it inferred the status of PFM - Agent or PFM - RM from the received alarm event.

• State information: PFM - Manager correctly confirmed the agent alarm status.

• State information(Unconfirmed): PFM - Manager could not confirm the agent alarm status.

• Heartbeat timeout: The Agent Collector or Remote Monitor Collector service is busy or inactive.

• Heartbeat detected: The Agent Collector or Remote Monitor Collector service has recovered from a busy or inactive status.

• Monitored System Unavailable: Operating information could not be collected because the monitored system had stopped.

• Monitored System Available: The monitored system recovered from not being able to collect operating information because the monitored system had stopped.

• Suspend: Monitoring has been suspended.

• Resume: Monitoring has been resumed.

Other than those mentioned above, a message that begins with KAV might be displayed.

If Heartbeat timeout is displayed, check the status of the PFM - Agent or PFM - RM. If a message that begins with KAV is displayed, see the chapter that explains messages in the PFM - Agent or PFM - RM manuals. There is no need to take any action for other messages because they are not error messages.

For alarm events:

• Alarm updated/deleted

• Alarm deactivated

  The meaning of these messages depends on the setting of alarmCompatibleMode, an item in the initialization file (config.xml) used to set the PFM - Web Console operating environment.

  For details about alarmCompatibleMode, see Initialization file (config.xml).

  When alarmCompatibleMode does not exist:

  •Alarm updated/deleted: The alarm definition was updated or deleted.

  •Alarm deactivated: The alarm is no longer active.

  When alarmCompatibleMode is true:

  •Alarm updated/deleted: The alarm definition was updated or deleted.

  •Alarm deactivated: The alarm is no longer active, or the alarm was updated and the previous alarm status was initialized.

  When alarmCompatibleMode is false:

  The meaning of the messages depends on the PFM - Manager version.

  When the PFM - Manager version is 09-10-19 or later:

  •Alarm updated/deleted: The alarm definition was deleted.

  •Alarm deactivated: The alarm is no longer active, or the alarm was updated and the previous alarm status was initialized.

  When the PFM - Manager version is earlier than 09-10-19:

  •Alarm updated/deleted: The alarm definition was updated or deleted.

  •Alarm deactivated: The alarm is no longer active.

• State changed(No instance data): The status of an instance changed, but there is no data on the instance.

In the case of multi-instance records, the following processing occurs:

• When a value in the abnormal or warning range is detected for at least one of the target instances

  The user-defined message set during alarm definition is displayed in Message. If a measurement value for performance data is set to be displayed in the message text, the value of the instance exceeding the threshold is set.

• When the status recovers from abnormal or warning to normal

  If the function for measurement value output at alarm recovery is enabled, the user-defined message set during alarm definition is displayed in Message text. In addition, if you set that the measurement value of performance data is to be displayed in Message text, the current measurement value of the instance that triggered issuance of the last error or warning alarm is set.

  If this function is disabled, a normal event is issued, but all instance values are within the normal range, and the value that triggered issuance of the event cannot be identified. As a result, nothing is displayed in Message text.

  For details about the function for measurement value output at alarm recovery, see the chapter that explains monitoring operations with alarms in the JP1/Performance Management User's Guide.

When you define multiple alarms in an alarm table and bind the alarm table to an agent, whether an agent event is issued depends on the result of evaluating the status of each alarm in the table. So if even one of multiple alarms is in an abnormal status, the status of the agent remains abnormal. Therefore, although an alarm event is issued to restore the status from abnormal to normal, an agent event might not be issued to restore the status if other alarms remain in an abnormal status. (Note that an alarm event and an agent event are not always issued at the same time).

For health check events:

Message text is displayed in HC: health-check-status format.

In addition, message text indicating the operating status of the service is displayed after the operating status of the agent. For details about display rules and examples of message texts, see the section that explains the health check agent in the appendix of the JP1/Performance Management Planning and Configuration Guide.

Close

Closes the Event Monitor window.

To Page Top

(2) Show Options page

This page is used to set the display conditions for the View report page, including conditions for the agents whose events you want to display and the maximum number of display items. The display conditions set on this page remain in effect until the user logs out from PFM - Web Console.

The structure of this page is different when the business group access control functionality is enabled and when it is disabled.

The following figure shows the Event Monitor window (Show Options page).

Figure 1‒6: Event Monitor window (Show Options page) when the business group access control functionality is enabled

Figure 1‒7: Event Monitor window (Show Options page) when the business group access control functionality is disabled

The following describes the items displayed on this page:

Close button

Closes the Event Monitor window.

OK button

Accepts the settings and returns to the View report page. The events on this page are displayed together with the display conditions you set.

Cancel button

Discards the specified settings and returns to the View report page.

Filter Settings

Specifies the agents whose events are to be displayed.

Display all agents

Select this check box to display all agents' events. The default is that this check box is selected.

If you clear this check box, no events will be displayed unless you set at least one agent in Visible agents.

Select business group

Displayed when the business group access control functionality is enabled. If Display all agents is selected, this pull-down menu is not available.

Set this item if you want to filter the agents that are displayed in Hidden agents according to business group. The following items are available on the pull-down menu:

• All business groups

  Select this item to display all agents.

• Business group name

  Select this item to display only agents to which business groups are assigned. Only business groups with the reference privilege are displayed.

• Unassigned

  Select this item to display agents to which no business groups are assigned. This item is displayed only when the user has logged in as a system user.

Hidden agents

Lists the agents that are currently not subject to event display. If you want to include any of these agents in the event displays, select the applicable agent and then use the arrow button (/) to move it to Visible agents.

Visible agents

Lists the agents that are currently subject to event display. If you want to remove any of these agents from the event displays, select the applicable agent and then use the arrow button (/) to move it to Hidden agents.

Arrow buttons (///)

Move agents between Hidden agents and Visible agents. Use the button to move agents from Hidden agents to Visible agents, and use the button to move agents from Visible agents to Hidden agents.

You can also use the arrow button () to move all agents in Hidden agents to Visible agents and the arrow button () to move all agents in Visible agents to Hidden agents. These arrow buttons (/) are displayed when the business group access control functionality is enabled.

Color Settings

Applies color-coding by status to the events displayed in the Event Monitor window. Different colors can be set for the statuses normal, warning, and abnormal.

Event color scheme

From the pull-down menu, select a scheme for color-coding the events displayed in the Event Monitor window by event status. When a color scheme is selected, the background of the rows displaying events is color-coded according to the event status. The default is None.

Available selections are as follows:

• None (no color-coding)

• Pastel colors

  For agent events and alarm events:

  Status	Color
  Normal	Light green (R=204, G=255, B=204)
  Warning	Light yellow (R=255, G=255, B=204)
  Abnormal	Light red (R=255, G=204, B=255)
  Inactive or status unknown	Light green (R=204, G=255, B=204)
  Monitoring suspended	Light gray (R=224, G=224, B=224)
  Monitoring resumed	Light blue (R=204, G=224, B=255)

  For health check events and the health check status:

  Status	Color
  Not Supported	Light yellow (R=255, G=255, B=204)
  Running	Light green (R=204, G=255, B=204)
  Monitoring suspended	Light gray (R=224, G=224, B=224)
  Incomplete	Light orange (R=255, G=224, B=204)
  Stopped	Light orange (R=255, G=224, B=204)
  Unconfirmed	Light orange (R=255, G=224, B=204)
  Host Not Available	Light red (R=255, G=204, B=255)

• Bright colors

  For agent events and alarm events:

  Status	Color
  Normal	Green (R=000, G=255, B=000)
  Warning	Yellow (R=255, G=255, B=000)
  Abnormal	Red (R=255, G=000, B=000)
  Inactive or status unknown	Green (R=000, G=255, B=000)
  Monitoring suspended	Gray (R=204, G=204, B=204)
  Monitoring resumed	Blue (R=000, G=000, B=255)

  For health check events and the health check status:

  Status	Color
  Not Supported	Yellow (R=255, G=255, B=000)
  Running	Green (R=000, G=255, B=000)
  Monitoring suspended	Gray (R=128, G=128, B=128)
  Incomplete	Orange (R=255, G=128, B=000)
  Stopped	Orange (R=255, G=128, B=000)
  Unconfirmed	Orange (R=255, G=128, B=000)
  Host Not Available	Red (R=255, G=000, B=000)

  Note

  When you select Bright colors, the text color is white for Abnormal, Monitoring suspended, Monitoring resumed, Incomplete, Stopped, Unconfirmed, and Host Not Available. The text color is black for other cases.

Event Settings

Sets the maximum number of events (records) to be displayed in the Event Monitor window.

Maximum number of events to display

Enter an integer in the range of 1 to 999. The default is 256.

To Page Top