IBM Tivoli Monitoring > Version 6.3 Fix Pack 2 > Administrator's Guide > Agent-based services > EIF events

IBM Tivoli Monitoring, Version 6.3 Fix Pack 2

Common slots for EIF emitted events

Review the descriptions of the set of common slots to understand the private situation event information at the EIF receiver.

All emitted EIF events will have a common set of slots in addition to the slots from the event attribute data. All attributes, except hidden attributes, that are defined in the attribute table used by the event are included in the emitted event (subject to the total event and slot size limitation). The set of common slots are explained in the following table.


Set of common slots for emitted EIF events.

Slots Values and meaning
adapter_host Base EVENT class attribute. Same as hostname (see below). This is application-specific data related to the event, if any.
appl_label Use to indicate the source of the event is from a private situation or agent online status. The value has the following syntax: 

        source : sit_type : event_type

where

  • source is always "A" for agent
  • sit_type is "P" for private situation or "E" for enterprise situation
  • event_type is "S" for situation events or "L" for life cycle status events

For example, A : P

For enterprise situation events, the appl_label value is not set. Thus, there is no appl_label="A:E:S".

cms_hostname Not used or null for agent emitted event.

Because the Tivoli Enterprise Monitoring Server is not used for EIF emitted events, the IBM Tivoli Enterprise Console event server logs no error message in the event synchronization synch_trace.log file after a private situation event has been closed.

cms_port Not used or null for agent emitted event.
fqhostname Base EVENT class attribute that contains the fully qualified hostname, if available.
hostname Base EVENT class attribute that contains the TCP/IP hostname of the managed system where the event originates, if available.
integration_type Indicator to help performance.

  • N for a new event, the first time the event is raised

  • U for update event, subsequent event status changes

master_reset_flag Master reset indicator set for master reset events. Value is NULL for all other events:

  • R for agent restart

  • Otherwise, NULL

msg Base EVENT class attribute that contains the situation name and formula, without the use of customization.
origin Base EVENT class attribute contained in the TCP/IP address, if available, of the managed system where the event originates. The address is in dotted-decimal format.
severity Base EVENT class attribute that contains the resolved severity.
situation_displayitem Display item of associated situation, if available.
situation_eventdata Raw situation event data starting from the second event data row, if any. Event data attributes are in key-value pair format. The event data can be truncated because of the total event size and slot size limit, which is 2 KB.
situation_group One or more situation group names (up to 5) that the situation is a member of.
situation_fullname Display name of situation if one was defined for the private situation.
situation_name Unique identifier given to the situation.
situation_origin Managed system name where the situation event originated. It has the same value as sub_source.
situation_status Current status of the situation event:

  • "Y" situation is true

  • "N" situation is false

  • "P" situation stopped

situation_time Timestamp of the situation event.
situation_type Situation event type S for sampled event; P for pure event.
situation_thrunode Managed system name of the agent.
source Base EVENT class attribute that contains ITM Agent: Private Situation or ITM Agent: Private Situation:Truncated
sub_origin Base EVENT class attribute that contains the value of display item, if any.
sub_source Base EVENT class attribute that contains the origin managed system name for the associated situation.


Parent topic:

EIF events

+

Search Tips   |   Advanced Search