What the situation event console shows

The Navigator alerts you when a situation becomes true by overlaying the Navigator item with an event indicator. Multiple alerts for the same Navigator item are consolidated under one event indicator, so you might not be aware of newly arrived alerts just by looking at the indicator. The situation event console view shows you the event activity for situations associated with the current Navigator item and any items within the branch.

You can navigate from an individual event to detailed information by clicking the link icon next to each event or by right-clicking the event and clicking Situation Event Results.

Toolbar

A row is inserted in the event console for every event action associated with the current Navigator item, one row per event. The event severity filters show a count of the events of that type next to the tool. For example,

⁵ Filter Minor is a count of five minor events. Use the filter tools to display only events of a certain state or status.

Filter Fatal

Show only Fatal events.

Filter Critical

Show only Critical events.

Filter Minor

Show only Minor events.

Filter Warning

Show only Warning events

Filter Harmless

Show only Harmless events

Filter Informational

Show only Informational events.

Filter Unknown

Show only Unknown events.

Filter Open

Show Open events only, including any that were reopened (acknowledgment removed) or whose acknowledgment expired.

Filter Acknowledged

Show Acknowledged events only.

Filter Stopped

Show Stopped situations only.

Filter Problem

Show Problem situations only. These are situations that are in error for some reason. Use this filter to locate situations that are not functioning properly so you can diagnose the problem.

Filter Expired

Show the events that were acknowledged, the acknowledgment expired, and the condition is still true.

Find

Open the Find dialog box for finding events of a particular severity, status, or some other criteria. See Finding table data.

(Active) -or- Play

(Paused)

The event console gets updated as status changes occur. Use this tool to pause automatic refresh, and click again to resume.

Total Events: 31 -or- Filtered Events: 7 of 31

This is the current row count of events in the console and any events waiting to be added.
If a filter has been applied, the count of events that are included in the filtered view is shown. For example, if you click the

Fatal and

Critical filters to show only the 2 Fatal events and 3 Critical events out of a total of 31 events, the display is Filtered Events: 5 of 31.

Item Filter: Item_name

The item filter is the name of the Navigator item by which the events are filtered.

Event list

The event console displays event information in the view.

If you begin to scroll the view or expand pure events, automatic refresh turns off and this indicator is displayed at the top left corner of the list. Click Console Resume when you want to resume automatic refresh.

Pure Event in the first column indicates the event is a pure event. Consecutive pure events are consolidated: Expand

Expand the list to show a row for each pure event;

Link to event details about the pure event;

Collapse the list back to one row. If the list does not expand, it means there is only one pure event.

Tip: You can remove old pure events from the list by closing the pure event.

The link button enables you to navigate to the Event Details workspace for an individual event.

Severity The severity of the event: Critical, Warning, Informational, and so on.

Status

The status of the event:

Open

The situation is true and the event indicator turned on. The icon and threshold color indicate the severity of the alert.

Expired overlays the state icon if the acknowledgment for the event has Expired while the event is still open.

overlays the state icon if the acknowledgment has been removed while the event is still open (Reopened).

Acknowledged

The event has been acknowledged.

Stopped

A user stopped the situation. It will not begin running again until someone starts it or edits it in the Situation editor.

Deleted

The situation was deleted through the Situation editor.

Problem

The situation is not functioning properly. One reason might be that the agent to which it is distributed is offline or is at an old, unsupported version level.

Owner The user who acknowledged or took ownership of the event.

Situation Name The name of the situation or policy.

Display Item If the situation was defined with a display item, it is displayed here. Otherwise, this field is empty.

Source The name of the agent and system identifying where the event occurred.

Impact The name of the Navigator item where the event indicator originated; when you click , the entire branch opens.

Opened This is the local time at the agent location when the event was last opened.

Age This is the time interval that has passed since the event was opened. If you apply a Filter or Threshold to this column, enter the number of minutes. After you click outside the cell, you will see the value converted to days, hours and minutes. For example, an entry of 1450 becomes 1 Day, 10 Minutes.

Local Timestamp The time at the Tivoli® Enterprise Monitoring Server (the one to which the agent connects) when the situation status changed.

Type

Additional information about the event, usually the event type.

Sampled: Sampled events happen when a situation becomes true. Situations sample data at regular intervals. When the situation is true, it causes an event, which gets closed automatically when the situation goes back to false (or you can close it manually).
Pure: Pure events are unsolicited notifications. Examples of pure events are an out-of-paper condition on a printer and an occurrence that adds an entry to the Windows System Log. Some Tivoli monitoring agents have attributes that report pure events, such as the NT Event Log and NT File Change attribute groups. A situation using one of these attributes can monitor for pure events. Because of the nature of pure events, they are not closed automatically like sampled events; you must close the event manually. Alternatively, you can author the situation with an UNTIL clause.

Situation ID The situation identifier.

Table view features

The features available to the table view, such as column locking, can also be used in the situation event console view.

You can open the Situation Event Results workspace and perform other event related tasks from the menu: Edit Situation, Start Situation, Stop Situation, Acknowledge Event, and Event Notes. You can also launch an application on your system, link to another workspace, or send a command to the managed system where the event occurred.

What the situation event console shows

Toolbar

Event list

Table view features

Menu