Event annotations

Edit online

The event annotations defined by the Insight® Pack index configuration are described here.

The following table lists the Netcool®/OMNIbus event fields that are defined in the index configuration file. It also lists the index configuration attributes assigned to each field. These annotations are displayed in the Operations Analytics - Log Analysis Search workspace, and can be used to filter or search the events.

Tip: The fields are not necessarily listed in Table 1 in the same order as the data source properties file. If you need to know which order the fields are given, see the omnibus1100.properties file, which is in the docs directory of the Tivoli® Netcool/OMNIbus Insight Pack.

Best practice for filtering on annotations is as follows:

  • To avoid a negative impact on performance, set filterable attributes to true only on required fields.
  • Do not set the filterable attribute to true for fields with potentially long strings, for example, the Summary field.
Table 1. Event annotations
Field Attributes
LastOccurrence 
dataType: DATE 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: true 
searchable: true
logRecord

This is a default field required by Operations Analytics - Log Analysis.

 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: false 
filterable: false 
searchable: true
Class 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true
sortable: false 
filterable: false 
searchable: true
AlertGroup 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: true 
searchable: true
Severity 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: true 
searchable: true
AlertKey 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: true 
searchable: true
Tally 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: false 
filterable: false 
searchable: true
NmosObjInst 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: true
searchable: true
NodeAlias 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: true
searchable: true
timestamp 
dataType: DATE 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: true 
searchable: true
Type 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: false 
searchable: true
Location 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: true 
searchable: true
Identifier 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: false 
searchable: true
Node 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: true 
searchable: true
Summary 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: true 
filterable: false 
searchable: true
OmniText

This field contains a concatenated string of the event fields. By default, its value is:

'@Manager' + ' ' + '@Agent' + ' ' + TO_STRING('@Grade')

In the default configuration, the names of the individual event fields contained in the OmniText string are not visible in search results.

 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: false 
filterable: false 
searchable: true
PubType

I when an event is inserted.

U when an existing entry is re-inserted or updated.

 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: false 
filterable: true 
searchable: true
ServerName

Corresponds to ServerName in alerts.status.

 
dataType: TEXT 
retrievable: true 
retrieveByDefault: true 
sortable: false 
filterable: true 
searchable: true
ServerSerial

Corresponds to ServerSerial in alerts.status.

 
dataType: LONG 
retrievable: true 
retrieveByDefault: true 
sortable: false 
filterable: false 
searchable: true