Alarm event class

The Alarm (or ALARM) event class is a subclass of the base Event class.

This class represents slots for Alarm events that have a severity of Critical, Major, or Minor.

Hidden slots

The hidden slots are internal slots that must not be changed.

To understand the list of slots that are used to determine duplicate events, see Slot facets.

Slot name	Slot display name	Type	Description	Hidden?
`al_alarm_id`	Alarm ID	String	Internal ID for an alarm.	No
`al_end_time`	End Time	Date (Epoch milliseconds)	Time when the alarm gets closed automatically.	Yes
`al_highest_severity`	Alarm Highest Severity	Severity	Highest severity of the event.	Yes
`al_last_time`	Last Time	Date (Epoch milliseconds)	Timestamp of the last data point that triggered the alarm.	Yes
`al_old_severity`	Alarm Old Severity	Severity	Old severity of the event.	Yes
`al_parameter_threshold`	Parameter Threshold	String	Threshold value that was crossed to cause generation of the event.	No
`al_parameter_name`	Metric	String	Name of the metric or property that went into the alarm or that triggered the event.	No
`al_parameter_unit`	Parameter Unit	String	Unit description of the metric.	No
`al_parameter_value`	Parameter Value	String	Actual value of the parameter.	No
`al_thresh_above`	Threshold Above	Boolean	Indicates whether the threshold is configured with a greater than condition. If the greater than condition is selected, the value of this slot is set to true, otherwise it is set to false. Example: Suppose you configured to raise an alarm when CPU utilization is greater than 75%. In this scenario, the value of this slot is set to true.	Yes
`al_thresh_duration`	Threshold Duration	Integer	Violation duration (in minutes) that data points must meet before the event is created.	Yes
`al_thresh_id`	Threshold ID	String	System generated unique ID for a threshold object. It is a combination of the monitor type, monitor type ID, monitor instance name, attribute (or metric) ID, severity, and tenant name. Example: NUK_FileSystem:nuk:FreeInodes:Major:HP	Yes
`al_thresh_type`	Threshold Type	String	Indicates that the threshold is user defined.	Yes
`object`	Object	String	Sub-component of the host to which the event is related. For example, it could be the name of the disk on which the event is reporting the problem.	No
`object_class`	Object Class	String	Identifies the class of an object. If the object class cannot be derived from the original event, it must be filled in during enrichment.	No
`object_id`	Object ID	String	It is a combination of Agent guid, Monitor type, and Instance name.	No
`al_agent_name`	Agent Name	String	Name of the agent.	No
`al_agent_port`	Agent Port	String	Agent port number.	No
`al_agent_os`	Agent OS	String	Operating system of the agent.	No
`al_device_ipaddress`	Agent IPAddress	String	IP address of the agent device.	Yes
`incident_category`	Incident Category	String	Category of the related incident event.	No
`incident_type`	Incident Type	String	Type of the related incident event.	No
`incident_item`	Incident Item	String	Item attribute of the related incident event.	No
`incident_operational_category1`	Incident Operational Category1	String	Operational Categorization 1 value for the specified event. The same gets populated into Op cat 1 for the incident.	No
`incident_operational_category2`	Incident Operational Category2	String	Operational Categorization 2 value for the specified event. The same gets populated into Op cat 2 for the incident.	No
`incident_operational_category3`	Incident Operational Category3	String	Operational Categorization 3 value for the specified event. The same gets populated into Op cat 3 for the incident.	No
`cross_launch_uri`	Cross Launch URI	String	Address used to cross-launch directly to the component.	No

Alarm event class

Comments