IBM Tivoli Monitoring > Version 6.3 > User's Guides > Agentless OS Monitor User's Guides > Agentless Monitoring for Windows User's Guide IBM Tivoli Monitoring, Version 6.3

Event mapping

The Tivoli Event Integration Facility (EIF) interface is used to forward situation events to Tivoli Netcool/OMNIbus or Tivoli Enterprise Console.

EIF events specify an event class, and the event data is specified as name-value pairs that identify the name of an event slot and the value for the slot. An event class can have subclasses. IBM Tivoli Monitoring provides the base event class definitions and a set of base slots that are included in all monitoring events. Agents extend the base event classes to define subclasses that include agent-specific slots. For Agentless Monitor for Windows events, the event classes correspond to the agent attribute groups, and the agent-specific slots correspond to the attributes in the attribute group.

The situation editor in the Tivoli Enterprise Portal can be used to perform custom mapping of data to EIF slots instead of using the default mapping described in this topic. For more information about EIF slot customization, see the Tivoli Enterprise Portal User's Guide.

Tivoli Enterprise Console requires that event classes and their slots are defined in BAROC (Basic Recorder of Objects in C) files. Each agent provides a BAROC file that contains event class definitions for the agent and is installed on the Tivoli Enterprise Monitoring Server in the TECLIB directory (install_dir/cms/TECLIB for Windows systems and install_dir/tables/TEMS_hostname/TECLIB for UNIX systems) when application support for the agent is installed. The BAROC file for the agent and the base BAROC files provided with Tivoli Monitoring must also be installed onto the Tivoli Enterprise Console. For details, see "Setting up event forwarding to Tivoli Enterprise Console" in the IBM Tivoli Monitoring Installation and Setup Guide.

Each of the event classes is a child of KR2_Base and is defined in the kr2.baroc (version 06.20.10) file. The KR2_Base event class can be used for generic rules processing for any event from the IBM Tivoli Agentless Monitoring for Windows Operating Systems.

For events that are generated by situations in the Computer System attribute group, events are sent using the ITM_KR2_COMPUTER_SYSTEM event class. This event class contains the following slots:

For events that are generated by situations in the Disk attribute group, events are sent using the ITM_KR2_DISK event class. This event class contains the following slots:

For events that are generated by situations in the hrDeviceTable attribute group, events are sent using the ITM_KR2_HRDEVICETABLE event class. This event class contains the following slots:

For events that are generated by situations in the hrProcessor attribute group, events are sent using the ITM_KR2_HRPROCESSOR event class. This event class contains the following slots:

For events that are generated by situations in the hrProcessorTable attribute group, events are sent using the ITM_KR2_HRPROCESSORTABLE event class. This event class contains the following slots:

For events that are generated by situations in the hrStorageTable attribute group, events are sent using the ITM_KR2_HRSTORAGETABLE event class. This event class contains the following slots:

For events that are generated by situations in the hrSystem attribute group, events are sent using the ITM_KR2_HRSYSTEM event class. This event class contains the following slots:

For events that are generated by situations in the Logical Disk attribute group, events are sent using the ITM_KR2_LOGICAL_DISK event class. This event class contains the following slots:

For events that are generated by situations in the Managed Systems SNMP attribute group, events are sent using the ITM_KR2_MANAGED_SYSTEMS_SNMP event class. This event class contains the following slots:

For events that are generated by situations in the Managed Systems WMI attribute group, events are sent using the ITM_KR2_MANAGED_SYSTEMS_WMI event class. This event class contains the following slots:

For events that are generated by situations in the Memory attribute group, events are sent using the ITM_KR2_MEMORY event class. This event class contains the following slots:

For events that are generated by situations in the Network attribute group, events are sent using the ITM_KR2_NETWORK event class. This event class contains the following slots:

For events that are generated by situations in the Network Interfaces attribute group, events are sent using the ITM_KR2_NETWORK_INTERFACES event class. This event class contains the following slots:

For events that are generated by situations in the Operating System attribute group, events are sent using the ITM_KR2_OPERATING_SYSTEM event class. This event class contains the following slots:

For events that are generated by situations in the Page File Usage Details attribute group, events are sent using the ITM_KR2_PAGE_FILE_USAGE_DETAILS event class. This event class contains the following slots:

For events that are generated by situations in the Paging File Summary attribute group, events are sent using the ITM_KR2_PAGING_FILE_SUMMARY event class. This event class contains the following slots:

For events that are generated by situations in the Performance Object Status attribute group, events are sent using the ITM_KR2_PERFORMANCE_OBJECT_STATUS event class. This event class contains the following slots:

For events that are generated by situations in the Physical Disk attribute group, events are sent using the ITM_KR2_PHYSICAL_DISK event class. This event class contains the following slots:

For events that are generated by situations in the Physical Memory attribute group, events are sent using the ITM_KR2_PHYSICAL_MEMORY event class. This event class contains the following slots:

For events that are generated by situations in the Process attribute group, events are sent using the ITM_KR2_PROCESS event class. This event class contains the following slots:

For events that are generated by situations in the Processes attribute group, events are sent using the ITM_KR2_PROCESSES event class. This event class contains the following slots:

For events that are generated by situations in the Processor attribute group, events are sent using the ITM_KR2_PROCESSOR event class. This event class contains the following slots:

For events that are generated by situations in the Processor Details attribute group, events are sent using the ITM_KR2_PROCESSOR_DETAILS event class. This event class contains the following slots:

For events that are generated by situations in the Processor Utilization Total attribute group, events are sent using the ITM_KR2_PROCESSOR_UTILIZATION_TOTAL event class. This event class contains the following slots:

For events that are generated by situations in the System attribute group, events are sent using the ITM_KR2_SYSTEM event class. This event class contains the following slots:

For events that are generated by situations in the Terminal Services attribute group, events are sent using the ITM_KR2_TERMINAL_SERVICES event class. This event class contains the following slots:

For events that are generated by situations in the Terminal Services Session attribute group, events are sent using the ITM_KR2_TERMINAL_SERVICES_SESSION event class. This event class contains the following slots:

For events that are generated by situations in the Terminal Services Session Memory attribute group, events are sent using the ITM_KR2_TERMINAL_SERVICES_SESSION_MEMORY event class. This event class contains the following slots:

For events that are generated by situations in the Thread Pool Status attribute group, events are sent using the ITM_KR2_THREAD_POOL_STATUS event class. This event class contains the following slots:

For events that are generated by situations in the User Accounts attribute group, events are sent using the ITM_KR2_USER_ACCOUNTS event class. This event class contains the following slots:

For events that are generated by situations in the Virtual Memory attribute group, events are sent using the ITM_KR2_VIRTUAL_MEMORY event class. This event class contains the following slots:

For events that are generated by situations in the WIN Performance Object Status attribute group, events are sent using the ITM_KR2_WIN_PERFORMANCE_OBJECT_STATUS event class. This event class contains the following slots:

For events that are generated by situations in the Windows Services attribute group, events are sent using the ITM_KR2_WINDOWS_SERVICES event class. This event class contains the following slots:

For events that are generated by situations in the WMI Event Log attribute group, events are sent using the ITM_KR2_WMI_EVENT_LOG event class. This event class contains the following slots:

For events that are generated by situations in the WMI Performance Object Status attribute group, events are sent using the ITM_KR2_WMI_PERFORMANCE_OBJECT_STATUS event class. This event class contains the following slots:


+

Search Tips   |   Advanced Search