Elements

The probe breaks event data down into tokens and parses them into elements. Elements are used to assign values to ObjectServer fields; the field values contain the event details in a form that the ObjectServer understands.

The following table describes the elements that the probe generates. Not all the elements described are generated for each event; the elements that the probe generates depend on the event type.

Table 1. Elements  

Element name

Element description

$Details

This element contains the main body of syslog messages, as specified by properties OffsetZero, OffsetOne, and OffsetTwo.

$Time

This element displays the timestamp of the syslog message, as specified in UNIX integer format.

$Tokennn

This element contains the tokens generated from syslog messages, as specified by properties OffsetZero and OffsetOne.

$TokenCount

This element contains the number of tokens created.

$EventCount

This element identifies the sequence number of the event.