Patrol Event event class

The Patrol Event (or PATROL_EV) event class is a subclass of the MonitorEvent event class.

This class represents slots for PATROL events.

Hidden slots

The hidden slots are internal slots that must not be changed.

To understand the list of slots that are used to determine duplicate events, see Slot facets.

Slot	Slot display name	Type	Description	Hidden?
p_agent_address	Agent Address	String	Network address of the PATROL Agent host.	No
p_agent_name	Patrol Agent Name	String	Host name of the PATROL Agent.	No
p_agent_port	Agent Port	Integer	Port number of the PATROL Agent.	No
p_agent_version	Agent Version	String	Version of the PATROL Agent (for example, 11.0.00).	No
p_application	Application	String	Name of the application class (for example, NT_HEALTH).	No
p_catalog	Catalog	String	Event catalog name of originating event (for example, 0).	No
p_class	Patrol Class	String	Event class name of originating event (for example, 11)	No
p_handler	Handler	String	Indicates the value, 'Patrol'.	No
p_host_class	Host Class	String	Type of OS, (example, NT6.2) This field is important to implement generic actions, such as rebooting a computer on which a problem has occurred. In the background, a generic action can be translated into a specific action based on this field.	No
p_instance	Instance	String	Name of the Monitored instance (for example, PROD1).	No
p_node	Node	String	Used to display the host name in virtual or remote monitored environments, where PATROL Event is generated. The host name returned by this slot depends on MetaFQDN value (which can be obtained by running the AQT commands). If the MetaFQDN value is not set, the host name of managed system is returned.	No
p_origin	Patrol Origin	String	Origin of the PATROL event. Based on the origin, the value can be the application class name, instance name, and the parameter name. The value will be in the format, <p_application.p_instance.p_parameter>. For example, p_origin='NT_HEALTH.NT_HEALTH.ResourceContention'	No
p_origin_key	Origin Key	String	Unique key or ID used by the originating tool to enumerate the event.	No
p_origin_sev	Origin Severity	Enum (Severity)	Event severity of originating event.	No
p_owner	Patrol Owner	String	Default account used to install PATROL agent.	No
p_parameter	Metric	String	Name of the metric or parameter.	No
p_parameter_unit	Parameter Unit	String	Unit description of the metric or parameter.	No
p_parameter_value	Metric Value	String	Actual value of the metric or parameter.	No
p_publish_hostname	Agent	String	Published host name of the PATROL Agent.	No
p_source_id	Source ID	String	Event id for the event.	No
p_status	Patrol Status	String	Status value of the PATROL event. Possible values are: OPEN ACK ASSIGNED CLOSED BLACKOUT	No
p_type	Type	String	Type of event (for example, ALARM).	No
source_address	Host Address	String	Address of the host where the adapter that sent the event is running.	No
object	Object	String	Subcomponent of the host with which the event is related. For example, it could be the name of the disk on which the event is reporting the problem.	No
object_class	Object Class	String	Identifies the class of an object. If the object class cannot be derived from the original event, it must be filled in during the enrichment.	No
object_id	Object ID	String	It is a combination of Agent guid, Monitor type, and Instance name. Important: Do not enrich the object_id slot.	No

Patrol Event event class

On this page