7.8.3 JP1 event information attribute values

1

Variable corresponding to the basic attribute

-

Entire event base information

N

2

EVBASE

The event ID converted to "Basic code: Extended code" format.

The basic code is the event ID(B.ID, and the extended code is the event ID(B.IDEXT).

The basic code and extension code are 8-digit hexadecimal numbers (A to F are uppercase characters), and the leading zeros of the respective ID are omitted.

For example, if the extension code is 00000000, the basic code is "0."

Y

3

EVID

The event ID converted to the "basic code" format.

An 8-digit hexadecimal number (A to F in uppercase), with leading zeros omitted from ID.

Y

4

EVIDBASE

Event-registration-time (B.TIME) converted to "yyyy/mm/dd" format.

Y

5

EVDATE

Event-registration-time (B.TIME) converted to "hh:mm:ss" format.

Y

6

EVTIME

The ID (B.PROCESSID) of the process that issued the event.

Y

7

EVPID

The user ID (B.USERID) of the process that issued the event.

Y

8

EVUSRID

The grouping ID (B.GROUPID) of the process that issued the event.

Y

9

EVGRPID

The value of the event publisher username (B.USERNAME).

Y

10

EVUSR

The value of the event publisher group name (B.GROUPNAME).

Y

11

EVGRP

Event issuer host name

The value of the issuer event server name (B.SOURCESERVER).

Y

12

EVHOST

The issuing IP address in IPv4 address format or IPv6 address format. ^#

Y

13

EVIPADDR

The value of the event DB serial number (B.SEQN).

Y

14

EVSEQNO

Event-arrival-time (B.ARRIVEDTIME) converted to "yyyy/mm/dd" format.

Y

15

EVARVDATE

Event-arrival time (B.ARRIVEDTIME) converted to "hh:mm:ss" format.

Y

16

EVSRCNO

The value of the source event DB serial number (B.SOURCESEQNO).

Y

17

EVMSG

The value of the message (B.MESSAGE).

Y

18

EVDETAIL

More information (B.DETAIL)

N

19

Variables corresponding to extended attributes (IM attributes)

EVSEV

Event Extended Info Severity (Emergency, Alert, Critical, Error, Warning, Notice, Information, Debug)

The value of the severity (E.SEVERITY).

Y

20

EVUSNAM

The value of the username (E.USER_NAME).

Y

21

EVOBTYP

The value of the object type (E.OBJECT_TYPE).

Y

22

EVOBNAM

The value of the object-name (E.OBJECT_NAME).

Y

23

EVROBTYP

The value of the registry name type (E.ROOT_OBJECT_TYPE).

Y

24

EVROBNAM

E.ROOT_OBJECT_NAME of the registry.

Y

25

EV"PRODUCT_NAME"

The value of the product name (E.PRODUCT_NAME).

Y

26

EV"OBJECT_ID"

The value of the Object ID (E.OBJECT_ID).

Y

27

EV"OCCURRENCE"

The value of the event type (E.OCCURRENCE).

Y

28

EV"START_TIME"

The value of the starting time (E.START_TIME).

Y

29

EV"END_TIME"

The value of the ending time (E.END_TIME).

Y

30

EV"RESULT_CODE"

The value of the exit code (E.RESULT_CODE).

Y

31

EV"JP1_SOURCEHOST"

The value of the source hostname (E.JP1_SOURCEHOST).

Y

32

EV "Extended Attribute-Name"

Any extended attribute

The attribute value of the attribute specified by the extended attribute name.

Y

33

Variables corresponding to extended attributes (IM attributes)

EV#@JP1IM_SEVERE

The value of the critical event flag (E.@JP1IM_SEVERE). 0 when matching response action.

Y

34

EV#@JP1IM_CORRELATE

A value that indicates whether the event is correlated (E.@JP1IM_CORRELATE).

• 0: Not a correlated event

• 1: Correlated event

• 2: Correlation failure event

Y

35

EV#@JP1IM_ORIGINAL_SEVERITY

The value of the severity (before change) (E.@JP1IM_ORIGINAL_SEVERITY).

(set to Emergency, Alert, Critical, Error, Warning, Notice, Information, Debug or Severity)

Attribute to be set only when severity changing function is enabled.

Y

36

EV#@JP1IM_CHANGE_SEVERITY

The value of the severity changing (E.@JP1IM_CHANGE_SEVERITY).

• 0: Have not changed the severity

• 1: Severity changed

Y

37

EV#@JP1IM_RELEASE

The value of the critical event release flag (E.@JP1IM_ RELEASE). 0 when matching response action.

Y

38

EV#@JP1IM_DISMISSED

The value of the critical event deletion flag (E.@JP1IM_DISMISSED). 0 for response action matching.

Y

39

EV#@JP1IM_MEMO

Attributes that are set after a note is set. The note (E.@JP1IM_MEMO).

Note.

No attributes are present and cannot be specified when the action is executed. If specified, the variable name is used as is.

Y

40

EV#@JP1IM_DISPLAY_MESSAGE

The value of the messaged (after change) (E.@JP1IM_DISPLAY_MESSAGE).

Attribute to be set only when the display message change function is enabled.

Y

41

EV#@JP1IM_CHANGE_MESSAGE

The value of the display message change (E.@JP1IM_CHANGE_MESSAGE).

Attribute to be set only when the display message change function is enabled.

• 0: The message has not been changed.

• 1: Message has been changed

Y

42

Other

ACTHOST

The value of the action execution request source manager host name.

Y

43

EVSID

SID of JP1 events.

Y