Elements

The probe breaks event data down into tokens and parses them into elements. Elements are used to assign values to ObjectServer fields; the field values contain the event details in a form that the ObjectServer understands.

During installation of the probe, several rules files are installed in addition to the main message_bus.rules file. Specific rules for the Probe Integration for Juniper Contrail Alerts are contained in the message_bus_contrail.rules file.

Live Alarm elements

The following elements are generated from Juniper Contrail SSE live alarms:

Table 1. Live alarm elements
Element name	Element description
`$ack`	This element indicates whether the alarm has been acknowledged.
`$description`	This element displays a description of the alarm.
`$resync_event`	This element indicates the alarm phase. This is always false for live alarms.
`$severity`	This element displays the severity of the alarm: `0: CRITICAL` `1: MAJOR` `2: WARNING`
`$timestamp`	This element shows the time at which the alarm occurred.
`$token`	This element contains the access token.
`$type`	This element indicates the alarm type.
`$MSGHEADER.key`	This element displays the node from which the alarm originated.
`$MSGHEADER.type`	This element displays the alarm type.
`$MSGHEADER.value_T`	This element displays the date and time of the alarm occurrence.
`$alarm_rules.or_list.0.and_list.0.condition.operand1`	This element displays the alarm rules or list operand 1.
`$alarm_rules.or_list.0.and_list.0.condition.operand2.json_value`	This element displays the alarm rules or list operand 1.
`$alarm_rules.or_list.0.and_list.0.condition.operation`	This element displays the alarm rules or list operation.
`$alarm_rules.or_list.0.and_list.0.condition.variables.0`	This element displays the alarm rules or list variable indexed 0.
`$alarm_rules.or_list.0.and_list.0.condition.variables.1`	This element displays the alarm rules or list variable indexed 0.
`$alarm_rules.or_list.0.match.*`	This element displays the alarm rules or list matches. Example: `$alarm_rules.or_list.0.and_list.0.match.0.json_operand1_value`