alerts.status fields used by Network Manager
The alerts.status table in the ObjectServer contains status information about problems that have been detected by probes.
A subset of the standard alerts.status fields is populated with Network Manager event data. Additionally, a
set of dedicated alerts.status fields are reserved to hold data that is specific to
Network Manager. The dedicated
alerts.status field names are identifiable by the prefix Nmos.
The following table describes the alerts.status fields that are populated by
Network Manager fields. Some of
these alerts.status fields are allocated default values from within the probe rules
file. (Avoid modifying these default values.)
| alerts.status field | Data type | Description | Network Manager field name/Default value in rules file |
|---|---|---|---|
| Agent | varchar(64) | The name of the process that generated the event. You can use this field to filter an Event Viewer to display only events of a specific type; for example, only discovery events (with a value of ncp_disco). | ExtraInfo_SOURCE |
| AlertGroup | varchar(255) | Used to group events by type. Values supplied by default from Network Manager events are either ITNM Monitor for network events, or ITNM Status for status events. | ExtraInfo_ALERTGROUP |
| AlertKey | varchar(255) | A text string concatenating several elements relating to the event. Elements can include the event ID, domain, phase, and process name. Allows problem and resolution events to be matched. | This value is generated from the input to ensure appropriate matching of problem and resolution events within the ObjectServer. |
| Class | integer | The alert class asigned to the Probe for Tivoli Netcool/OMNIbus. | A value of 8000 is reserved for events generated by Network Manager. |
| EventId | varchar(255) | The type of event (for example, SNMPTRAP-linkDown). The Event Gateway uses this value to look up the event map, and to determine the precedence of events. | EventName |
| ExpireTime | integer | The expiry time of the event in the database. Not currently used by Network Manager. | |
| FirstOccurrence | time | A timestamp indicating when the event first occurred. | |
| Identifier | varchar(255) | A unique value for each type of event on a given entity (for example, a LinkDown event on a specific device interface). This identifier controls deduplication. | This value is generated from the input to ensure appropriate deduplication of events in the ObjectServer. In the rules file, the identifier is constructed as a concatenation of field values. |
| LastOccurrence | time | A timestamp indicating when the event last occurred. | |
| LocalNodeAlias | varchar(64) | The IP or DNS address of the device. This value usually refers to the chassis, but for pingFails only, can correspond to the interface. | For network events, this field is set to
the same value as the Node field. No value is set for status events, to ensure that they are not fed back into Network Manager through the Event Gateway. |
| LocalPriObj | varchar(255) | The specific entity for which the event is generated; for example, the ifIndex, ifDescr, or ifPhysAddress field value. | ExtraInfo_AGENT or ExtraInfo_FINDER or ExtraInfo_ifIndex
or ExtraInfo_NEWPHASE or ExtraInfo_SERVICE or ExtraInfo_STITCHER The
ExtraInfo_ifIndex value is shown using the syntax |
| LocalRootObj | varchar(255) | The container of the entity referenced in the LocalPriObj field. This need not be the chassis, but could, for example, be slot in a chassis. The chassis can still be identified using LocalNodeAlias. | |
| LocalSecObj | varchar(255) | The secondary object referenced by the event. | ExtraInfo_OLDPHASE |
| Manager | varchar(64) | A descriptive name that identifies the system that forwarded the events. | A value of ITNM is used
for events generated by Network Manager V3.8,
or later. A value of Omnibus is used in earlier versions. |
| NmosCauseType | integer | The event state. Populated by the NMOS gateway.
The possible values are as follows:
|
|
| NmosDomainName | varchar(64) | The name of the Network Manager network
domain that raised the event. The name of the primary domain is used
in failover mode. By default, this field is populated only for events that are generated by Network Manager. To populate this field for other event sources, such as those from other probes, you must modify the rules files for those probes. This field is populated by the Event Gateway if an event is matched to an entity in a domain. |
Domain |
| NmosEntityId | integer | The unique Object ID that identifies the topology
entity with which the event is associated. This field is similar to
the NmosObjInst field but contains more detailed information. For
example, this field can include the ID of an interface within a device. For events generated by the Polling engine, the NmosEntityId field is populated in the probe rules file. For all other events, this field is populated by the gateway when the entity is identified. |
ExtraInfo_MONITOREDENTITYID |
| NmosEventMap | varchar(64) | The event map name and optional precedence for
the event, which indicates how Network Manager should
process the event; for example, PrecisionMonitorEvent.910. The optional
precedence number can be concatenated to the end of the value, following
a period (.). If the precedence is not supplied, it is set to 0. Note: This
value can be overridden by an explicit insertion into the Event Gateway
config.precedence table, which provides the same data.
|
|
| NmosManagedStatus | integer | The managed status of the network entity for which the event was raised. When a network entity is unmanaged, the Network Manager polls are suspended and events from other sources are tagged as unmanaged. This field allows you to filter out events from unmanaged entities. The possible values for this field are as follows:
|
|
| NmosObjInst | integer | The unique Object ID that identifies the containing
topology chassis entity with which the event is associated. Populated
by the NMOS gateway. Tip: This field can be used to detect
whether the event has been passed for event enrichment.
|
|
| NmosSerial | integer | The serial number of the event that is suppressing the current event. Populated by the NMOS gateway. | |
| Node | varchar(64) | The device from which the event originated. If an event is raised against an entity with an accessible IP address, the IP address is used. Otherwise, the entityName value from NCIM is used. By default, Node has the same value as LocalNodeAlias. | ExtraInfo_ACCESSIPADDRESS or EntityName The EntityName value maps to the Node field only if the ExtraInfo_ACCESSIPADDRESS input field is empty. |
| NodeAlias | varchar(64) | The IP address of the main node, if available. | ExtraInfo_MAINNODEADDRESS |
| RemoteNodeAlias | varchar(64) | The network address of a remote node, where
relevant. For example:
|
|
| Serial | incr | A unique ID per event per ObjectServer instance. Where primary and backup ObjectServers are configured, the ObjectServers will have different serial numbers for the same event. |
|
| ServerName | varchar(64) | The name of the originating ObjectServer. | |
| ServerSerial | integer | The Serial number of the event in the originating
ObjectServer. Where primary and backup ObjectServers are configured, the ObjectServers will have different serial numbers for the same event. If the event originated in the current ObjectServer, the ServerSerial value is the same as the Serial value. |
|
| Severity | integer | The severity level of the event stored in the
ObjectServer. The default values are as follows:
|
Severity |
| StateChange | time | A timestamp indicating when the event was last modified. This field can be used to determine whether a process is modifying an event after it has been added to the ObjectServer. | |
| Summary | varchar(255) | A textual description of the event. | Description |
| Tally | integer | A count of the number of times that an event has occurred. This value is
displayed in the Count column in the event list or Event Viewer, and in the Occurred column in the
mojo.events table. |
|
| Type | integer | The type of the alert. The values of particular
relevance to Network Manager are
|
ExtraInfo_EVENTTYPE |