Event Attributes

The probe breaks event data down into tokens and parses them into elements. Elements are used to assign values to ObjectServer fields; the field values contain the event details in a form that the ObjectServer understands.

The probe generates a standard set of event attributes for all logs that it monitors. By default, the probe generates the event attributes described in the following table:

Table 1. Default event attributes
Event attribute name	Event attribute description
`$Computer`	This event attribute contains the name of the host.
`$DateTime`	This event attribute displays the time when the event log record was generated.
`$EventDescription`	This event attribute contains the description of the event.
`$EventID`	This event attribute contains the unique identifier of the event.
`$Level`	This event attribute displays the category of the event.
`$LogName`	This event attribute contains the name of the log where the event was recorded.
`$Source`	This event attribute contains the name of the software that recorded the event.

The probe can also generate additional event attributes for all logs that it monitors by using the EventAttribute property. Using this property, you can specify one or more of the event attributes described in the following table:

Table 2. Additional event attributes
Event attribute name	Event attribute description
`$Keywords`	This event attribute contains the keywords assigned to an event.
`$OpCode`	This event attribute contains the numeric value that identifies the activity or point within an activity that the application was performing when the event was raised.
`$RecordId`	This event attribute contains the number of the event log record.
`$TaskCategory`	This event attribute contains the subcomponent or activity of the event publisher.
`$User`	This event attribute displays the username of the owner of the event.