lseventlog

Use the lseventlog command to display a concise view of the system event log, or a detailed view of one entry from the log.

Syntax

Read syntax diagramSkip visual syntax diagram lseventlog -alertyesno-messageyesno-monitoringyesno-expiredyesno-fixedyesno-configyesno-countentry_limit-orderdateseveritysequence_number

Parameters

-delim delimiter
(Optional) Specify a delimiter to separate data in the output.
-nohdr
(Optional) Suppress the headings in the output.
-filtervalue attribute=value
(Optional) Specifies a list of one or more filters. Only objects with a value that matches the filter attribute value are displayed.
-filtervalue?
(Optional) Displays a list of valid filter attributes.
-alert yes | no
(Optional) Includes (or excludes) events with alert status.
-message yes | no
(Optional) Includes events with message status.
-monitoring yes | no
(Optional) Includes events with monitoring status.
-expired yes | no
(Optional) Includes (or excludes) events with expired status.
-fixed yes | no
(Optional) Includes (or excludes) events with fixed status.
-config yes | no
(Optional) Includes (or excludes) events with config status.
-count entry_limit
(Optional) Indicates the maximum number of events to display.
-order date | severity
(Optional) Indicates what order the events must be in. Ordering by date displays the oldest events first. Ordering by severity displays the events with the highest severity first. If multiple events have the same severity, then they are ordered by date, with the oldest event displayed first.
The following list shows the order of severity, starting with the most severe:
  1. Unfixed alerts (sorted by error code; the lowest error code has the highest severity)
  2. Unfixed messages
  3. Monitoring events (sorted by error code; the lowest error code has the highest severity)
  4. Expired events
  5. Fixed alerts and messages
sequence_number
(Optional) Indicates whether the command must display a full view of the event.

Description

This command displays a concise view of the system event log, or a detailed view of one entry from the log. You can sort the events and entries by severity or age.

The default values for included events are:
  • alert=yes
  • config=no
  • expired=no
  • fixed=no
  • message=yes
  • monitoring=no
This table provides the attribute values that can be displayed as output view data.
Table 1. lseventlog output
Attribute Description Value
machine_type Indicates the node machine type and model number. The value is an alphanumeric string up to 7 characters long.
serial number Indicates the node serial number. The value is an alphanumeric string up to 7 characters long.
sequence_number Indicates the sequence number of the event. The value is numeric from 0 to 8000000.
first_timestamp Indicates when the event was added to the log. The value is in the format YYMMDDHHMMSS.
first_timestamp_epoch Indicates when the event was added to the log (in seconds) after the epoch occurs. The value is a numeric 32-bit value.
last_timestamp Indicates when the event was most recently updated. The value is in the format YYMMDDHHMMSS.
last_timestamp_epoch Indicates the most recent update (in seconds) after an epoch for an event. The value is a numeric 32-bit value.
fixed_timestamp Indicates the time stamp when event is fixed. The value is in the format YYMMDDHHMMSS.
fixed_timestamp_epoch Indicates the time stamp (in seconds) when an event is fixed after an epoch occurs. The value is a numeric string.
fru Indicates the field-replaceable unit (FRU) for error or event; this field contains probable FRUs (separated by commas). The value is an ASCII string up to 255 characters long.
object_type Indicates the type of the object the event is logged against. The values are:
  • mdisk
  • mdiskgrp
  • volume (or volume copy)
  • node
  • host
  • io_grp (iogroup in dumperrlog)
  • fc_consist_grp (fcgrpin dumperrlog)
  • rc_consist_grp(rcgrp in dumperrlog)
  • fc_map (fcmap in dumperrlog; flash in caterrlog)
  • rc_relationship (rcmapin dumperrlog; remote in caterrlog)
  • cluster
  • controller (devicein caterrlog and dumperrlog)
  • quorum
  • migrate
  • email_server (emailserver in caterrlog and dumperrlog)
  • enclosure
  • drive
object_id Indicates the ID of the object the event is logged against. The value is a numeric 64-bit value. It is displayed in decimal for all object types other than clustered systems.

For a clustered system, this value is hexadecimal but is blank for events with cluster object types.

object_name Indicates the name of the object the event is logged against. This value is the object name format and is blank if the object was deleted or does not have a name.
copy_id Indicates the volume copy ID the event is logged against. The value is a numeric value 0 to 1; it is blank if not a vdiskcopy event.
reporting_node_id Indicates the ID of the node that reported the event. The value is a numeric 64-bit value that is blank if the event is reported by the clustered system.
reporting_node_name Indicates the name of the node that reported the event. This value is the object name format and is blank if node is deleted or event is reported by the clustered system.
root_sequence_number Indicates the sequence number of the root or causal event
Important: If the event is directly caused by another event, the sequence_number of the related event is shown here.
 The value is a numeric value from 1 to 8000000; blank if there is no root or if the event is not directly caused by another event.
event_count Indicates the number of reported events that are combined into this event The value is a numeric 32-bit value.
status Indicates the event category. The values are:
  • alert
  • message
  • monitoring
  • expired
fixed Indicates whether the event was marked fixed (for an alert) or read (for a message). The values are:
  • yes
  • no (for events that cannot be fixed, or are not fixed)
auto_fixed Indicates whether event is marked fixed by the code. The values are:
  • yes
  • no (for events that cannot be fixed, or are not fixed)
notification_type Indicates the type of event notification. The values are:
  • error
  • warning
  • informational
  • none
event_id Indicates the event ID. The value is a 6-digit numeric value.
event_id_text Indicates the description that is associated with the event ID. The value is a text value with a maximum of 200 bytes.

This appears in CLI requested language.
error_code Indicates the error code that is associated with this event. The value is a 4-digit numeric value but is blank if there is no error code.
error_code_text Indicates the description that is associated with the error code. The value is a text value with a maximum of 200 bytes that is blank if there is no error code.

This value appears in the language that is requested by the CLI.
description Indicates the description that is associated with the event.

If the event has an error code, this value is the same as the error_code_text field; otherwise, it is the same as the event_id_text field

 Text (maximum of 200 bytes).
callhome_type Indicates the type of Call Home that is associated with the event. The values are hardware, software, and none.
sense1 Indicates the sixteen bytes of hex-encoded sense data; least significant byte is on the left. The value is 16 2-character hexadecimal numbers that are separated by spaces.
sense2
sense3
sense4
sense5
sense6
sense7
sense8