4.1.1 Monitoring from the Central Console
The Central Console centrally manages JP1 events that were generated on agents and received at the manager. JP1 events issued on agents are filtered, and only the JP1 events that need to be monitored are forwarded to the manager.
|
JP1 events are displayed in a time series in the Event Console window. The window has three pages, which you can display as required by clicking the appropriate tab. In some cases, JP1 events might be selected by the filtering function during the pre-processing for display in JP1/IM - View. This is explained below in 4.2 Filtering of JP1 events. JP1 events might be consolidated by repeated-event monitoring during pre-processing for display in JP1/IM - View. This is explained in 4.4 Suppressing display of repeated events.
The Event Console window has the following three types of pages:
- Monitor Events page
-
The Monitor Events page displays JP1 events in the order received at the manager. Use this page to view events generated in the system in a time series.
JP1 events acquired from the JP1/Base event service on the manager are displayed.
The view filter function is available on the Monitor Events page. Users can choose how to filter the JP1 events displayed on the Monitor Events page.
When a large number of identical events occur in a short space of time, they can be summarized on the Monitor Events page using the function for consolidating repeated events.
The Monitor Events page can also display JP1 events consolidated by repeated-event monitoring.
- Severe Events page
-
The Severe Events page lists only those JP1 events considered to be severe events.
A severe event is a JP1 event that needs to be addressed, such as a failure of some sort. By default, JP1 events whose event level is Emergency, Alert, Critical, or Error are defined as severe events.
When a severe event occurs, the alarm lamp in JP1/IM - View flashes to inform the user.
You can use the view filter function on the Severe Events page.
You can freely filter JP1 events to separate out those to be displayed on the Severe Events page.
The Severe Events page can also display JP1 events consolidated by repeated-event monitoring.
- Search Events page
-
The Search Events page displays the results of an event search conducted on a host from JP1/IM - View.
Because only severe events are forwarded to a manager, you must perform an event search if you want to view normal JP1 events. For example, you can use the Search Events page to retrieve events immediately before and after a JP1 event indicating a problem when you want to find out what was happening at the time.
You can also use the Search Events page to display old events that have been removed from the JP1/IM - View's scroll buffer.
For an overview of the event search, see 4.6 Searching for events.
You can perform the following operations and settings for the JP1 events displayed in the Event Console window:
-
Specify a start time for listing JP1 events
When you use the integrated monitoring database, you can change the JP1 events listed in the Event Console window of JP1/IM - View by specifying a date and time or by moving the slider in the event display start-time specification area. After you specify a start time for listing JP1 events, among the JP1 events generated after the specified start time (the date and time displayed in the event display start-time text boxes or the date and time displayed on the slider), only those JP1 events that match the applied filter conditions are searched from the integrated monitoring database and displayed in the Event Console window. This allows you to see JP1 events when the maximum number of viewable events (JP1/IM - View's scroll buffer size) has been exceeded and there are too many events to fit into the Event Console window all at once.
The event display start-time specification area does not appear in the Search Events page.
-
View JP1 event details
You can view detailed attribute information about JP1 events. You can also view operating advice, such as troubleshooting procedures, if event guide information has been preset for a selected JP1 event. When you use the integrated monitoring database, you can set and display memos by enabling the function for entering memos in JP1 events. When a memo has been set, the
icon appears to the left of the listed event.
-
Specify a period for listing JP1 events
Using the event display period specification, you can set a base time and a period of days for listing events. For example, suppose the current time is 9:15 am on July 8, and you set the display period as follows:
-
Base time
09:00
-
Display period
2 days
With this setting, the listing will cover JP1 events that have occurred since 9:00 am on the previous day (July 7).
-
-
Launch linked applications by monitor startup
You can launch the GUI of a linked product associated with a selected JP1 event.
-
View the execution results of automated actions
You can view the execution result of an automated action executed in response to a JP1 event.
The execution results of automated actions cannot be displayed in the Search Events page.
-
Change the display items for JP1 events
The following information can be displayed as JP1 event information in the Event Console window:
- Items displayed by default:
-
Event level, Registered time, Source host, User name, Event ID, Message, Object type, and Action.
- Items not displayed by default:
-
Start time, End time, Product name, Object name, Root object type, Root object name, Arrived time, Occurrence, Serial number, Source process ID, Source user ID, Source group ID, Source user name, Source group name, Source serial number, Type, Action type, Source IP address, Object ID, Return code, Relation Event serial number, Correlation event generation condition name, Suppressed event ID, Repeated event condition name, Monitoring ID, Log file trap name, and Extended attribute.
In addition to the above items, when you use the integrated monitoring database, Original severity level, New severity level, Changed display message, New display message, Display message change definition, Memo, Common exclude conditions group ID, Common exclude conditions group name, and Common exclude conditions group target-for-exclusion are also not displayed by default. Original severity level and New severity level are displayed when the severity changing function is enabled. Changed display message, New display message, and Display message change definition are displayed when the display message change function is enabled. Memo is displayed when the memo functionality is enabled. When you use mapping of the event source hosts, Event source host name is displayed by default in addition to the above items.
For Extended attribute, the information specified in the definition file for the extended event attributes (extended file) is displayed.
You can change the display items and their order to suit your purpose.
In addition to the above display items, icons representing the event status and the presence of an event memo are displayed in JP1 event listings. These icons appear in front of the event name in the Event Console window. The memo icon does not appear unless you are using the integrated monitoring database.
Event-specific information and other information not covered by the above display items can be displayed in the Event Console window by mapping the event-specific information to one of the above display items. In this case, # is prefixed to the displayed information.
-
Set the response status of JP1 events
You can set the response status of JP1 events. Any of the following four statuses can be set, according to how events are processed and the action already taken: Processed, Processing, Held, and Unprocessed. You can check the settings in the Monitor Events page, Severe Events page, or Search Events page. The response status is represented by an icon.
The response statuses that can be set and displayed differ for each page, as shown in the following table.
Table 4‒2: Differences in response status settings among pages in the Event Console window Page
Specifiable response statuses
Number of events whose response status can be set in one operation
Update of other pages when response status changes#1
Monitor Events
Processed, Processing, Held, Unprocessed
Multiple
Automatically updated
Severe Events
Processed, Processing, Held, Unprocessed, Delete#2
Multiple
Automatically updated
Search Events
Processed, Processing, Held, Unprocessed
Multiple
After next search
#1: When a response status is set on another page, the Monitor Events page or Severe Events page is automatically updated to reflect the changed status (provided the Apply check box is selected for Automatic refresh in the Preferences window). Otherwise, you can update the response status in the Monitor Events page and Severe Events page by choosing View and then Refresh, or by clicking the Refresh button. To refresh the Search Events page, you must perform another search.
#2: When Delete is set for a JP1 event on the Severe Events page, that JP1 event is no longer listed on the page. Because the events deleted on the Severe Events page are not deleted from the event database and integrated database, they might appear on other pages and, if so, their response status can still be set.
The events once deleted on the Severe Events page cannot be redisplayed on the page.
You can also set the response status in the Related Events window, which opens from the Event Console window. You can set and display the same statuses as on the page from which you opened the Related Events window.
You can also generate a JP1 event whenever a response status changes. This allows you to record a history of the actions taken.
-
Highlighting
You can apply a background color to the JP1 events displayed in the Event Console window (the default is no highlighting). If you set the background colors to be used, JP1 events are highlighted according to their event levels when they are displayed on the Monitor Events, Severe Events, or Search Events page of the Event Console window.
When you use the integrated monitoring database, events are highlighted according the user-defined event level.
You can change the background color by using the system color definition file (systemColor.conf). For details, see System color definition file (systemColor.conf) (Chapter 2. Definition Files) in the manual JP1/Integrated Management 3 - Manager Command, Definition File and API Reference.