3.2.3 Lists of JP1 events output by JP1/IM - Agent

Basic attributes

Event ID

ID

Value^# with Setup to entry "jp1_pc_eventid" in alert configuration file (jpc_alerting_rules.yml)

#: If the jp1_pc_eventid is not Setup, 00007600 is Setup.

Message

MESSAGE

• When a firing condition of the alert is met

  A string generated from the value set in item "jp1_pc_firing_description" in the alert configuration file (jpc_alerting_rules.yml).^#

  #: If you have not set a jp1_pc_firing_description, "The alert is firing. (alert=alert name)" is set.

• When the alert firing condition is no longer met

  A string generated from the value set in item "jp1_pc_resolved_description" in the alert configuration file (jpc_alerting_rules.yml)^#

  #: If you have not set a jp1_pc_resolved_description, "The alert is resolved. (alert=alert name)" is set.

Extended Properties (Common Information)

Severity

SEVERITY

• When a firing condition of the alert is met

  Value set in item "jp1_pc_severity" of alert configuration file (jpc_alerting_rules.yml)^#

  #: If you have not set a jp1_pc_severity, set an empty character.

• When the alert firing condition is no longer met

  Information

Product Name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2 or /HITACHI/JP1/JPCCS2/xxxx

xxxx is your preferred Value.

Object Type

OBJECT_TYPE

ALARM

Object Name

OBJECT_NAME

Alert name^#

#:

Value with Setup to entry "alert" in alert configuration file (jpc_alerting_rules.yml)

Event Type

OCCURRENCE

NOTICE

Origin host name

JP1_SOURCEHOST

Setup Value depends on whether or not it is the alert of judging Yet another cloudwatch exporter performance-data.

• For Yet another cloudwatch exporter

  For metric performance data in EC2, you Setup Value that is Setup in the jp1_pc_nodelabel tag of AWS as Event source host. If you have not set a jp1_pc_nodelabel, set the empty character.

  For a metric other than EC2, Host name of integrated agent that is Setup in Yet another cloudwatch exporter discovery configuration file field targets is Setup as Event source host. If targets are not set, set the empty character.

• Other than Yet another cloudwatch exporter

  Setup the monitored Host name of field targets in the Discovery configuration file as event source host. If targets are not set, set the empty character. If file entry "targets" in Blackbox exporter (ICMP monitoring) discovery configuration is set to IP address as Setup, set IP address to Setup as Event source host.

Extended Attribute (Unique Information)

PP Name

PPNAME

/HITACHI/JP1/JPCCS2

Alert firing time

JPC_TIME

Stores the duration of alert firing in seconds since UTC 1970-01-01 00:00:00.

In the event extension attribute definition file included with JP1/IM - Manager, specify "type="elapsed_time/date_format:CLIENT" on the attr statement.

For a resolved alert, it is the same as the time of the firing alert.

For details, see the description of "type = "elapsed_time/date_format:CLIENT" in Definition file for extended event attributes (company-name_product-name_attr_xx.conf) in Chapter 2. Definition Files in the JP1/Integrated Management 3 - Manager Command, Definition File and API Reference.

Host name for integrated agent

JPC_PROMETHEUS

Value set in item "jp1_pc_prome_hostname" of Prometheus configuration file (jpc_prometheus_server.yml^)#

# If you have not set a jp1_pc_prome_hostname, set an empty character.

Scrape Jobs

JPC_JOB

In the scrape_configs of the Prometheus configuration file (jpc_prometheus_server.yml), the value set for job_name

jp1_pc_nodelabel

JPC_NODELABEL

In the scrape_configs of the Prometheus configuration file (jpc_prometheus_server.yml), the value set for item "jp1_pc_nodelabel"^#

# If you have not set a jp1_pc_nodelabel, set the empty character.

Exporter Name

JPC_EXPORTER

Value set in item "jp1_pc_exporter" in the discovery configuration file^#

#

If not specified, it will be "Unknown Exporter".

Metric Name

JPC_METRICNAME

The value set in item "jp1_pc_metricname" of the alert configuration file (jpc_alerting_rules.yml)^#

# If you have not set a jp1_pc_metricname, set an empty character.

jp1_pc_remote_monitor_instance

JPC_REMOTE_

MONITOR_INSTANCE

Value set in item "jp1_pc_remote_monitor_instance" in the discovery configuration file^#

#

If not specified, the attribute is not set.

AWS Service Name

JPC_AWS_SERVICE

AWS service name

Set only for Yet another cloudwatch exporter performance data.

Set the service name corresponding to the metric name set in item "jp1_pc_metricname" in the alert setting file (jpc_alerting_rules.yml) by searching for it from the metric definition file. If you have not set a jp1_pc_metricname, set an empty character.

AWS account

JPC_AWS_ACCOUNT

AWS account string

Set only for Yet another cloudwatch exporter performance data.

This string corresponds to the AWS account ID described in the AWS definition file (aws_settings.conf). If the definition does not exist, set "default".

AWS Region name

JPC_AWS_REGION

AWS region name monitored by Yet another cloudwatch exporter

Set only for Yet another cloudwatch exporter performance data.

# If dimension_InstanceId label does not exist, set it to an empty character.

AWS InstanceId

JPC_AWS_DIM_INSTANCEID

AWS/EC2 dimension names

Set the label only if dimension_InstanceId exists in the performance data of Yet another cloudwatch exporter.

AWS FunctionName

JPC_AWS_DIM_FUNCTIONNAME

AWS/Lambda dimension names

Set the label only if dimension_FunctionName exists in the performance data of Yet another cloudwatch exporter.

AWS Resource

JPC_AWS_DIM_RESOURCE

AWS/Lambda dimension names

Set it only if dimension_Resource label exists in the performance data of Yet another cloudwatch exporter.

AWS BucketName

JPC_AWS_DIM_BUCKETNAME

AWS/S3 dimension names

Yet another cloudwatch exporter's performance data dimension_BucketName so set the label only if it exists.

AWS StorageType

JPC_AWS_DIM_STORAGETYPE

AWS/S3 dimension names

Set the label only if dimension_StorageType exists in the performance data of Yet another cloudwatch exporter.

AWS FilterId

JPC_AWS_DIM_FILTERID

AWS/S3 dimension names

Set dimension_FilterId label only if it exists in the performance data of Yet another cloudwatch exporter.

AWS TableName

JPC_AWS_DIM_TABLENAME

AWS/DynamoDB dimension names

Set the label only if dimension_TableName exists in the performance data of Yet another cloudwatch exporter.

AWS StateMachineArn

JPC_AWS_DIM_STATEMACHINEARN

AWS/States dimension names

Set it only if dimension_StateMachineArn label exists in the performance data of Yet another cloudwatch exporter.

AWS QueueName

JPC_AWS_DIM_QUEUENAME

AWS/SQS dimension names

Set the dimension_QueueName label only if it exists in the performance data of Yet another cloudwatch exporter.

Component name

JPC_COMPONENT

Component Name

Setup JP1 event which product plugin in JP1/IM - Agent is related.

• For jp1pccs_azure.js

  /HITACHI/JP1/JPCCS/AZURE/CONFINFO

• For jp1pccs_kubernetes.js

  /HITACHI/JP1/JPCCS/KUBERNETES/CONFINFO

• For jp1pccs.js

  "/HITACHI/JP1/JPCCS/CONFINFO" or Null

Basic attributes

Event ID

ID

Value specified for JP1 Event ID in monitoring text-formatted log file definition file.

The default Value is "00007601".

Message

MESSAGE

Value captured by the name MESSAGE in text-formatted log file monitoring definition file's regular expressions for parsing logging.

Extended Properties (Common Information)

Event level

SEVERITY

Value specified in Event level of monitoring text-formatted log file definition file.

Product name

PRODUCT_NAME

Label-name of /HITACHI/JP1/JPCCS2/LOGTRAP/ IM management node

Object type

OBJECT_TYPE

LOGFILE

Object name

OBJECT_NAME

File of the logged File.

Root object type

ROOT_OBJECT_TYPE

LOGFILE

Root object name

ROOT_OBJECT_NAME

File of the logged File.

Extended Attribute (Unique Information)

Platform

PLATFORM

In Windows :NT

In Linux: UNIX

PP

PPNAME

/HITACHI/JP1/JPCCS2

Event source host

JP1_SOURCEHOST

Host name of the logged host. In Logical host, Logical host name.

Log file trap name

JP1_TRAP_NAME

Value specified in Log file trap name of monitoring text-formatted log file definition file.

The Date/time logs added

JPC_LOG_TIME

Value captured by the name "time" in monitoring text-formatted log file definition file's regular expressions for parsing logging. If not, Date/time that Fluentd monitored for logging.

Time_t type (seconds since UTC 1970-01-01 00:00:00)

jp1_pc_nodelabel

JPC_NODELABEL

Value specified in label name of IM management node for monitoring text-formatted log file definition file.

Any item

Any attribute name

Any Value.

You can capture Message of the log and Setup any Value for any Attribute name. For details on setting method, see the description of the [Attributes Settings] section in the Monitoring text-formatted log file definition file (fluentd_@@trapname@@_tail.conf.template) in Chapter 2. Definition Files in the JP1/Integrated Management 3 - Manager Command, Definition File and API Reference.

Basic attributes

Event ID

ID

Value specified for JP1 Event ID in monitoring Windows event-log definition file. The default Value is "00007602".

Message

MESSAGE

Message of Windows event log.

Limit: 1023 bytes. The excess is displayed as a truncation.

Extended Properties (Common Information)

Event level

SEVERITY

Add according to what is displayed in the "Levels" or "Keywords" section of Windows's Event Viewer.

The following shows what Event level displays:

• Critical: Critical

• Error: Error

• Warning: Warning

• Information: Information, details, etc.

• Notice: Success Audit, Failure Audit

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2/LOGTRAP/ Sources

Sources indicate what is displayed in Windows's Event Viewer under "Sources", i.e. Provider text of the render property (or ProviderName's Value if it cannot be converted).

Object type

OBJECT_TYPE

LOGFILE

Object name

OBJECT_NAME

NTEVENTLOG

Root object type

ROOT_OBJECT_

TYPE

LOGFILE

Root object name

ROOT_OBJECT_NAME

NTEVENTLOG

Extended Attribute (Unique Information)

The Date/time logs added

A0

Date/time displayed in the "Log Date" section of Windows's Event Viewer.

time_t type (seconds since UTC 1970-01-01 00:00:00)

Computer name

A1

This is what is displayed in "Computer" in the event viewer of Windows.

NT Logging type"

A2

System/Security/Application/Setup/

Directory Service/DNS Server/File

Replication Service/Internet Explorer/Key

Management Service/HardwareEvents

In addition, the information displayed in "Log Name" in the Event Viewer of Windows.

NT Logging Type

A3

Critical/Error/Warning/Information/

Verbose/Audit_Success/Audit_Failure

(determined by Value of level, keyword)^#

NT Logging Categories

A4

This is what is displayed in the "Task Category" of the Event Viewer of Windows. (Task rendered text)

Unable to convert to rendered string: (Value of Task)

If it cannot be classified: None

NT Event ID

A5

This is what is displayed in "Event ID" in the event viewer of Windows.

NT User name

A6

This is what is displayed for "Users" in the event viewer of Windows.

NT logging level

A7

This is what is displayed in "Levels" in the event viewer of Windows.

NT Logging Keywords

A8

This is what is displayed in "Keywords" in the event viewer of Windows.

NT logging opcode

A9

This is what is displayed in "Opcode" in the event viewer of Windows.

Platform

PLATFORM

NT

PP

PPNAME

/HITACHI/JP1/JPCCS2

Event source host

JP1_SOURCEHOST

Host name of the logged host. For Logical host, Logical host name.

Log file trap name

JP1_TRAP_NAME

Value specified for the Log file trap name for monitoring Windows event-log definition file.

jp1_pc_nodelabel

JPC_NODELABEL

Value specified in the label name of IM management node for monitoring Windows event-log definition file.

Basic attributes

Event ID

ID

00007620

Message

MESSAGE

KNBC20043-E

Extended Properties (Common Information)

Event level

SEVERITY

Error

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2

Object type

OBJECT_TYPE

IMAGTHC

Object name

OBJECT_NAME

IMAGENT

Occurrence

OCCURRENCE

NOTICE

Extended Attribute (Unique Information)

Event source host

JP1_SOURCEHOST

Integrated agent host name on which JP1/IM agent control base has been installed that JP1/IM agent management base has not been connected for a period of time.

Basic attributes

Event ID

ID

00007621

Message

MESSAGE

KNBC20044-I

Extended Properties (Common Information)

Event level

SEVERITY

Information

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2

Object type

OBJECT_TYPE

IMAGTHC

Object name

OBJECT_NAME

IMAGENT

Occurrence

OCCURRENCE

NOTICE

Extended Attribute (Unique Information)

Event source host

JP1_SOURCEHOST

Integrated agent host name where JP1/IM agent control base connected to JP1/IM agent management base is installed.

Basic attributes

Event ID

ID

00007622

Message

MESSAGE

KNBC20045-I

Extended Properties (Common Information)

Event level

SEVERITY

Information

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2

Object type

OBJECT_TYPE

IMAGTHC

Object name

OBJECT_NAME

IMAGENT

Occurrence

OCCURRENCE

NOTICE

Extended Attribute (Unique Information)

Event source host

JP1_SOURCEHOST

Integrated agent host name on which JP1/IM agent control base to be stopped is installed.

Basic attributes

Event ID

--

The default Value is "00007630" ^#1.

Serial number

SEQNO

Serial number

Source process ID

PROCESSID

0

Registered time

TIME

Time of registration

Arrival time

ARRIVEDTIME

Time of arrival

Source user ID

USERID

For -1 to 65,535^#2

Source group ID

GROUPID

For -1 to 65,535^#2

Source user name

USERNAME

In Windows: SYSTEM

In UNIX: root

Source group name

GROUPNAME

In Windows: NULL string

In UNIX: root

Event-issuing server name

SOURCESERVER

Event-issuing server name

Source serial number

SOURCESEQNO

Source serial number

Message

--

KNBC00030-I

Extended attribute (Common Info)

Event level

SEVERITY

Information

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2

Object type

OBJECT_TYPE

SERVICE

Object name

OBJECT_NAME

IMBASE

Occurrence

OCCURRENCE

NOTICE

Basic attributes

Event ID

--

The default Value is the "00007631" ^#1.

Serial number

SEQNO

Serial number

Source process ID

PROCESSID

0

Registered time

TIME

Time of registration

Arrival time

ARRIVEDTIME

Time of arrival

Source user ID

USERID

For -1 to 65,535^#2

Source group ID

GROUPID

For -1 to 65,535^#2

Source user name

USERNAME

In Windows: SYSTEM

In UNIX: root

Source group name

GROUPNAME

In Windows: NULL string

In UNIX: root

Event-issuing server name

SOURCESERVER

Event-issuing server name

Source serial number

SOURCESEQNO

Source serial number

Message

--

KNBC00031-I

Extended attribute (Common Information)

Event level

SEVERITY

Information

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2

Object type

OBJECT_TYPE

SERVICE

Object name

OBJECT_NAME

IMBASE

Occurrence

OCCURRENCE

NOTICE

Basic attributes

Event ID

--

The default Value is the "00007632" ^#1.

Serial number

SEQNO

Serial number

Source process ID

PROCESSID

0

Registered time

TIME

Time of registration

Arrival time

ARRIVEDTIME

Time of arrival

Source user ID

USERID

For -1 to 65,535^#2

Source group ID

GROUPID

For -1 to 65,535^#2

Source user name

USERNAME

In Windows: SYSTEM

In UNIX: root

Source group name

GROUPNAME

In Windows: NULL string

In UNIX: root

Event-issuing server name

SOURCESERVER

Event-issuing server name

Source serial number

SOURCESEQNO

Source serial number

Message

--

KNBC00032-I

Extended attribute (Common Information)

Event level

SEVERITY

Information

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2

Object type

OBJECT_TYPE

SERVICE

Object name

OBJECT_NAME

IMBASE

Occurrence

OCCURRENCE

NOTICE

Basic attributes

Event ID

--

The default Value is "00007640".

Serial number

SEQNO

Serial number

Source process ID

PROCESSID

0

Registered time

TIME

Time of registration

Arrival time

ARRIVEDTIME

Time of arrival

Source user ID

USERID

For -1 to 65,535^#

Source group ID

GROUPID

For -1 to 65,535^#

Source user name

USERNAME

In Windows: SYSTEM

In UNIX: root

Source group name

GROUPNAME

In Windows: NULL string

In UNIX: root

Event-issuing server name

SOURCESERVER

Event-issuing server name

Source serial number

SOURCESEQNO

Source serial number

Message

--

KNBC00018-I

Extended attribute (Common Information)

Event level

SEVERITY

Infomation

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2

Object type

OBJECT_TYPE

SERVICE

Object name

OBJECT_NAME

When the definition file of JP1/IM - Manager was operated:

FILEOPERATION_MANAGER

When the definition file of integrated agent was operated:

FILEOPERATION_AGENT

Occurrence

OCCURRENCE

NOTICE

Basic attributes

Event ID

--

The default Value is "00007641".

Serial number

SEQNO

Serial number

Source process ID

PROCESSID

0

Registered time

TIME

Time of registration

Arrival time

ARRIVEDTIME

Time of arrival

Source user ID

USERID

For -1 to 65,535^#

Source group ID

GROUPID

For -1 to 65,535^#

Source user name

USERNAME

In Windows: SYSTEM

In UNIX: root

Source group name

GROUPNAME

In Windows: NULL string

In UNIX: root

Event-issuing server name

SOURCESERVER

Event-issuing server name

Source serial number

SOURCESEQNO

Source serial number

Message

--

Setup one of the following:

• KNBC00012-E

• KNBC00013-E

• KNBC00015-E

• KNBC00017-E

• KNBC00010-E

• KNBC00014-E

• KNBC20009-E

• KNBC20012-E

• KNBC20014-E

• KNBC20015-W

• KNBC20016-W

• KNBC20017-W

• KNBC20018-E

• KNBC20023-E

Extended attribute (Common Information)

Event level

SEVERITY

• Warning message output

  Warning

• Error message output

  Error

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2

Object type

OBJECT_TYPE

SERVICE

Object name

OBJECT_NAME

When the definition file of JP1/IM - Manager was operated:

FILEOPERATION_MANAGER

When the definition file of integrated agent was operated:

FILEOPERATION_AGENT

Occurrence

OCCURRENCE

NOTICE

Basic attributes

Event ID

--

The default Value is "00007642".

Serial number

SEQNO

Serial number

Source process ID

PROCESSID

0

Registered time

TIME

Time of registration

Arrival time

ARRIVEDTIME

Time of arrival

Source user ID

USERID

For -1 to 65,535^#

Source group ID

GROUPID

For -1 to 65,535^#

Source user name

USERNAME

In Windows: SYSTEM

In UNIX: root

Source group name

GROUPNAME

In Windows: NULL string

In UNIX: root

Event-issuing server name

SOURCESERVER

Event-issuing server name

Source serial number

SOURCESEQNO

Source serial number

Message

--

KNBC00019-I

Extended attribute (Common Information)

Event level

SEVERITY

Infomation

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2

Object type

OBJECT_TYPE

SERVICE

Object name

OBJECT_NAME

When the definition file of JP1/IM - Manager was operated:

FILEOPERATION_MANAGER

When the definition file of integrated agent was operated:

FILEOPERATION_AGENT

Occurrence

OCCURRENCE

NOTICE

Basic attributes

Event ID

--

The default Value is "00007643".

Serial number

SEQNO

Serial number

Source process ID

PROCESSID

0

Registered time

TIME

Time of registration

Arrival time

ARRIVEDTIME

Time of arrival

Source user ID

USERID

For -1 to 65,535^#

Source group ID

GROUPID

For -1 to 65,535^#

Source user name

USERNAME

In Windows: SYSTEM

In UNIX: root

Source group name

GROUPNAME

In Windows: NULL string

In UNIX: root

Event-issuing server name

SOURCESERVER

Event-issuing server name

Source serial number

SOURCESEQNO

Source serial number

Message

--

Setup one of the following:

• KNBC20009-E

• KNBC20012-E

• KNBC20014-E

• KNBC20016-W

• KNBC20017-W

• KNBC20019-E

• KNBC20020-W

• KNBC20021-W

• KNBC20022-E

• KNBC20023-E

• KNBC00012-E

• KNBC00013-E

• KNBC00015-E

• KNBC00016-E

• KNBC00010-E

• KNBC00014-E

Extended attribute (Common Information)

Event level

SEVERITY

• Warning message output

  Warning

• Error message output

  Error

Product name

PRODUCT_NAME

/HITACHI/JP1/JPCCS2

Object type

OBJECT_TYPE

SERVICE

Object name

OBJECT_NAME

When the definition file of JP1/IM - Manager was operated:

FILEOPERATION_MANAGER

When the definition file of integrated agent was operated:

FILEOPERATION_AGENT

Occurrence

OCCURRENCE

NOTICE