Notification attributes lists the notification attributes that are contained in notifications generated by the Global Manager. When you create a matching pattern, use the name of the attribute, not the column heading from the Notification Log.

Table 1. Notification attributes

Attribute

Default column name

Value type

Description

Acknowledged

Acknowledged

Boolean

Indicates if a notification has been acknowledged. Possible values include:

  • TRUE if the notification has been acknowledged.

  • FALSE if not.

Active

Active

Boolean

Indicates if a notification is active. Possible values include:

  • TRUE if the notification is active.

  • FALSE if not.

AuditTrail

n/a

String

Audit trail includes five fields separated by spaces. The fields include:

  • Serial number — A unique number that identifies the audit trail entry.

  • Timestamp — Identifies when this audit trail entry was written.

  • User — The InCharge username associated with this audit trial entry.

  • Action type — Identifies the reason for the audit trail entry.

  • Text — A brief description of the audit trail entry.

Category

Category

String

Type of notification sent by the Global Manager. Possible values include:

  • Availability

  • Discovery

  • Error

  • IMPACT

  • Operational

  • Performance

  • PowerSupply

  • Resource

  • Temperature

Certainty

Certainty

Float

Confidence that this notification is the correct diagnosis. Value ranges from 0 to 100.

ClassDisplayName

Class

String

Name of the class that appears to the user.

ClassName

ClassName

String

Class name of the instance where this event occurred. This attribute, with InstanceName and EventName uniquely identifies this notification.

ClearOnAcknowledge

n/a

Boolean

Indicates that this event should be cleared when it is acknowledged. Default is FALSE.

ElementClassName

Element Class

String

Class name of the managed element most closely related to this event.

ElementName

Element Name

String

Name of the managed element most closely related to this event.

EventDisplayName

Event

String

Name of the notification that appears to the user.

EventName

EventName

String

Name of this notification. This attribute, with ClassName and InstanceName, uniquely identify this notification.

EventState

Event State

String

Describes the state of the event. Value can be one of:

  • ACTIVE

  • WAS_ACTIVE

  • SUSPENDED

  • INACTIVE

  • UNITIALIZED

EventText

Event Text

String

A description of the notification.

EventType

Event Type

String

MOMENTARY when the notification has no duration. DURABLE if the notification has a period for which it is active, such as a link failure.

FirstNotifiedAt

First Notify

Integer

Time, in seconds, when the notification first became active.

Events diagnosed by an underlying domain include timestamps that accurately reflect when the event occurred. The Global Manager uses this value from the event for the FirstNotifiedAt/LastNotifiedAt times when it creates the notification.

Impact

Impact

Integer

Numeric value that indicates the effect of this event on related elements.

InMaintenance

In Maintenance

Boolean

Indicates if the device is in maintenance mode. Possible values include:

  • TRUE if the device is in maintenance mode.

  • FALSE if not.

InstanceDisplayName

Name

String

Name of the instance that is displayed to the user.

InstanceName

InstanceName

String

Name of the object where this notification occurred. This attribute, with ClassName and EventName, uniquely identify this notification.

IsProblem

IsProblem

Boolean

IsProblem is defined as TRUE if (and only if) at least one of the types is “PROBLEM”, and none of the types are anything other

than “PROBLEM” or “UNKNOWN”.

Note:

Since filtering on IsRoot can result in transient behavior, it is recommended to filter on IsProblem instead.

IsRoot

IsRoot

Boolean

Indicates if the notification is an authentic problem. Possible values include:

  • TRUE if the notification is an authentic problem (root cause).

  • FALSE if not.

If a given notification has no CausedBy relationship, it is declared to be a root event, and IsRoot for that notification is set to TRUE.

It is often useful to filter on IsRoot to find those notifications which require immediate attention.

LastChangedAt

Last Change

Integer

Time, in seconds, when the status of the notification last changed.

LastClearedAt

Last Clear

Integer

Time, in seconds, when the notification was last cleared.

LastNotifiedAt

Last Notify

Integer

Time, in seconds, when the notification was last notified.

OccurrenceCount

Count

Integer

Number of times the notification has occurred.

Owner

Owner

String

Name of the person responsible for this notification. Value is SYSTEM when acknowledged by the Global Manager.

Severity

Severity

Integer

Level of severity for this notification.

1 = CRITICAL

2 = MAJOR

3 = MINOR

4 = UNKNOWN

5 = NORMAL

Note:

Only the numbers, not the text descriptions, are passed by the Global Manager.

SourceDomainName

Source

String

Name of the underlying domain that sent this notification. If more than one domain is listed, the names are separated by commas.

SourceEventType

SourceEventType

String

Indicates the type of event from an underlying source or sources. Value can be one of:

  • PROBLEM

  • EVENT

  • AGGREGATE

  • UNKNOWN.

The default value is UNKNOWN. (Not to be confused with Event Type.)

TroubleTicketID

Ticket ID

String

Trouble-ticket number associated with this notification.

UserDefined1-20

User Defined 1-20

String

Twenty notification attributes can be defined by the user. You can set a value with a hook script specified in DomainType section of ics-default.xml file.
Note:

For attributes that contain a time value, time is counted from Midnight, January 1st, 1970 (GMT). In the Global Console, these values are converted to a date and time.