Attributes for matching notification properties

Notification attributes lists the notification attributes that are contained in notifications generated by the
Global Manager
. When you create a matching pattern, use the name of the attribute, not the column heading from the Notification Log.
Notification attributes
Attribute
Default column name
Value type
Description
Acknowledged
Acknowledged
Boolean
Indicates if a notification has been acknowledged. Possible values include:
  • TRUE if the notification has been acknowledged.
  • FALSE if not.
Active
Active
Boolean
Indicates if a notification is active. Possible values include:
  • TRUE if the notification is active.
  • FALSE if not.
AuditTrail
n/a
String
Audit trail includes five fields separated by spaces. The fields include:
  • Serial number — A unique number that identifies the audit trail entry.
  • Timestamp — Identifies when this audit trail entry was written.
  • User — The InCharge username associated with this audit trial entry.
  • Action type — Identifies the reason for the audit trail entry.
  • Text — A brief description of the audit trail entry.
Category
Category
String
Type of notification sent by the
Global Manager
. Possible values include:
  • Availability
  • Discovery
  • Error
  • IMPACT
  • Operational
  • Performance
  • PowerSupply
  • Resource
  • Temperature
Certainty
Certainty
Float
Confidence that this notification is the correct diagnosis. Value ranges from 0 to 100.
ClassDisplayName
Class
String
Name of the class that appears to the user.
ClassName
ClassName
String
Class name of the instance where this event occurred. This attribute, with InstanceName and EventName uniquely identifies this notification.
ClearOnAcknowledge
n/a
Boolean
Indicates that this event should be cleared when it is acknowledged. Default is FALSE.
ElementClassName
Element Class
String
Class name of the managed element most closely related to this event.
ElementName
Element Name
String
Name of the managed element most closely related to this event.
EventDisplayName
Event
String
Name of the notification that appears to the user.
EventName
EventName
String
Name of this notification. This attribute, with ClassName and InstanceName, uniquely identify this notification.
EventState
Event State
String
Describes the state of the event. Value can be one of:
  • ACTIVE
  • WAS_ACTIVE
  • SUSPENDED
  • INACTIVE
  • UNITIALIZED
EventText
Event Text
String
A description of the notification.
EventType
Event Type
String
MOMENTARY when the notification has no duration. DURABLE if the notification has a period for which it is active, such as a link failure.
FirstNotifiedAt
First Notify
Integer
Time, in seconds, when the notification first became active.
Events diagnosed by an underlying domain include timestamps that accurately reflect when the event occurred. The
Global Manager
uses this value from the event for the FirstNotifiedAt/LastNotifiedAt times when it creates the notification.
Impact
Impact
Integer
Numeric value that indicates the effect of this event on related elements.
InMaintenance
In Maintenance
Boolean
Indicates if the device is in maintenance mode. Possible values include:
  • TRUE if the device is in maintenance mode.
  • FALSE if not.
InstanceDisplayName
Name
String
Name of the instance that is displayed to the user.
InstanceName
InstanceName
String
Name of the object where this notification occurred. This attribute, with ClassName and EventName, uniquely identify this notification.
IsProblem
IsProblem
Boolean
IsProblem is defined as TRUE if (and only if) at least one of the types is “PROBLEM”, and none of the types are anything other
than “PROBLEM” or “UNKNOWN”.
Since filtering on IsRoot can result in transient behavior, it is recommended to filter on IsProblem instead.
IsRoot
IsRoot
Boolean
Indicates if the notification is an authentic problem. Possible values include:
  • TRUE if the notification is an authentic problem (root cause).
  • FALSE if not.
If a given notification has no CausedBy relationship, it is declared to be a root event, and IsRoot for that notification is set to TRUE.
It is often useful to filter on IsRoot to find those notifications which require immediate attention.
LastChangedAt
Last Change
Integer
Time, in seconds, when the status of the notification last changed.
LastClearedAt
Last Clear
Integer
Time, in seconds, when the notification was last cleared.
LastNotifiedAt
Last Notify
Integer
Time, in seconds, when the notification was last notified.
OccurrenceCount
Count
Integer
Number of times the notification has occurred.
Owner
Owner
String
Name of the person responsible for this notification. Value is SYSTEM when acknowledged by the
Global Manager
.
Severity
Severity
Integer
Level of severity for this notification.
1 = CRITICAL
2 = MAJOR
3 = MINOR
4 = UNKNOWN
5 = NORMAL
Only the numbers, not the text descriptions, are passed by the
Global Manager
.
SourceDomainName
Source
String
Name of the underlying domain that sent this notification. If more than one domain is listed, the names are separated by commas.
SourceEventType
SourceEventType
String
Indicates the type of event from an underlying source or sources. Value can be one of:
  • PROBLEM
  • EVENT
  • AGGREGATE
  • UNKNOWN.
The default value is UNKNOWN. (Not to be confused with Event Type.)
TroubleTicketID
Ticket ID
String
Trouble-ticket number associated with this notification.
UserDefined1-20
User Defined 1-20
String
Twenty notification attributes can be defined by the user. You can set a value with a hook script specified in DomainType section of ics-default.xml file.
For attributes that contain a time value, time is counted from Midnight, January 1st, 1970 (GMT). In the Global Console, these values are converted to a date and time.