Column data from other sources

Edit online

In addition to the column data from the Netcool®/OMNIbus ObjectServer alerts.status table, Netcool Operations Insight® events also contain column data from other sources.

Columns from cloud native analytics

The following table describes the content of each of the columns.
Note: Any references in these column descriptions to incidents, incident management, or tenants can be ignored during the time frame of the Netcool Operations Insight 1.6.1 release.
Table 1.
Column name Data type Description Source
AdvCorrCauseType Varchar Field used by the Netcool Knowledge Library. Netcool Knowledge Library
AdvCorrServerName Varchar Field used by the Netcool Knowledge Library. Netcool Knowledge Library
AdvCorrServerSerial Integer Field used by the Netcool Knowledge Library. Netcool Knowledge Library
AggregationFirst Time Timestamp when event was first inserted at the aggregation layer. Netcool/OMNIbus multitiered architecture
AsmStatusId Varchar(64) Status of one or more resources modeled within the topology management capability. This is a raw status ID that can be used within the topology or used in custom automation or trigger sets. The cloud native analytics service
CEAAsmStatusDetails Varchar(4096) Details on the AsmStatusId, if there is a corresponding status ID within the event or synthetic grouping parent event. This is used to provide time data that is used to display status in the Alert Viewer. The cloud native analytics service
CEACorrelationKey Varchar(255) The correlating group key for this event. The correlation key value links this event to a synthentic grouping parent event. This correlating group key could be for one or more correlating groups from different algorithms. The cloud native analytics service
CEACorrelationDetails Varchar(4096) Details on each correlation group that this event has been correlated to. The data stored here is a set of name-value pairs, where the name is the correlating group key to a JSON structure of group details. This column is intended for use by the UI. The cloud native analytics service
CEAEventClassification Varchar(255) Event type classification used to help calculate the probable cause score. The cloud native analytics service
CEAEventScore Integer The non-normalised probable cause score associated with an event. The cloud native analytics service
CEAIsSeasonal Integer An indicator of whether the event is seasonal or not. The cloud native analytics service
CEASeasonalDetails Varchar(4096) Details on the nature of these events seasonality, if it is seasonal. The cloud native analytics service
CEMDeduplicationKey Varchar(64) Used as part of the integration of event management capabilities within Netcool Operations Insight. Deduplicates occurrences of the same event. The event management service
CEMErrorCode Integer Used as part of the integration of event management capabilities within Netcool Operations Insight. Gateway specific error code. The event management service
CEMEventId Varchar(64) Used as part of the integration of event management capabilities within Netcool Operations Insight. Unique identifier for the occurrence of this event. The event management service
CEMIncidentUUID Varchar(64) Used as part of the integration of event management capabilities within Netcool Operations Insight. Identifier of the incident that this event belongs to. The event management service
CEMSubscriptionID Varchar(64) Used as part of the integration of event management capabilities within Netcool Operations Insight. Identifies the event management subscription the event originates from. The event management service
CauseType Varchar Field used by the scope-based grouping algorithm. Scope-based grouping algorithm
CollectionFirst Time Timestamp when the event was inserted at the collection layer. Netcool/OMNIbus multitiered architecture
DisplayFirst Time Timestamp when event was first inserted at the display layer. Netcool/OMNIbus multitiered architecture
EventData Varchar Incident management workflow column. Normalized JSON blob containing overflow property data from the event. The event management service
IBMExtractedType Varchar Field used by the Netcool Knowledge Library. Scope-based grouping algorithm
IncidentKey Varchar Incident Management Workflow. The incident key of an incident that this event is part of. Incident management
IncidentUuid Varchar Incident Management Workflow. Unique UUID reference key to the event in incident management workflow. Incident management
IsClosed Integer Incident Management Workflow. Additional state indication column to reflect closure state of the event in the incident management workflow. Incident management
LastOccurrenceUSec Integer

In the LastOccurrence field, the last occurrence of an event is displayed down to the latest second. The LastOccurrenceUSec provides extra precision by indicating any additional microseconds associated with the last occurrence time.

For example, assume the last occurrence time for an event is at 02:15:59:243 am, where the units are HH:MM:SS:mmm.

In this case the LastOccurrence and LastOccurrenceUSec fields for this event contain the following values:

LastOccurrence: 02:15:59 am

LastOccurrenceUSec: 243000 milliseconds

 Scope-based grouping algorithm

The topology management service
LocalObjRelate Varchar Field used by the Netcool Knowledge Library. Netcool Knowledge Library
LocalTertObj Varchar Field used by the Netcool Knowledge Library. Netcool Knowledge Library
RemoteObjRelate Varchar Field used by the Netcool Knowledge Library. Netcool Knowledge Library
RemoteTertObj Varchar Field used by the Netcool Knowledge Library. Netcool Knowledge Library
RunbookID Integer RunbookID of the runbook linked to this event via a Trigger The runbook automation service
RunbookParameters Varchar Parameters to be sent to runbook execution in JSON format. This field is populated by the rules of the Trigger. The runbook automation service
RunbookParametersB64 Varchar Base64 encoding of the "RunbookParameters" field. The runbook automation service
RunbookStatus Varchar Status of the Runbook execution The runbook automation service
RunbookURL Varchar URL to launch into the Runbook UI to execute the linked Runbook with the RunbookID and the RunbookParameters pre-filled The runbook automation service
TenantId Varchar Incident Management Workflow. Stores the id of the tenant that owns the alert in the incident management workflow. Events have no tenant id until they become part of an incident. Tenant assignment is likely to be on all events at some point in the future. Incident management