Return statistics for PATROL events that match the specified filter.
Syntax
event_report([start-time],[stop-time],[status],[type],[node],
[origin],[pattern],[IDrange],[class],[severity])
Parameters
| |
---|
| time endpoint that specifies the oldest event timestamp that is valid for the event report Valid Values ■ " " indicating January 1, 1970 at 00:00:00 ■ PSL backward compatible: MMddhhmm[yy] ■ RFC-822: day date month year hh:mm:ss ■ Unix: day month date hh:mm:ss year ■ PSL date(): day month date hh:mm:ss year The variables have the following values: day—Sun Mon Tue Wed Thu Fri Sat MM—01 to 12 month—Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec dd or date—01 to 31 hh—00 to 23 mm and ss—00 to 59 year—1902 to 2037 [yy]—00 to 99 (19yy is assumed) In the PSL compatibility format the current year is used when yy is omitted. |
| time endpoint that specifies the most recent event timestamp that is valid for the event report Valid Values ■ " " indicating all event timestamps in the repository ■ PSL backward compatible: MMddhhmm[yy] ■ RFC-822: day date month year hh:mm:ss ■ Unix: day month date hh:mm:ss year ■ PSL date(): day month date hh:mm:ss year The variables have the following values: day—Sun Mon Tue Wed Thu Fri Sat MM—01 to 12 month—Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec dd or date—01 to 31 hh—00 to 23 mm and ss—00 to 59 year—1902 to 2037 [yy]—00 to 99 (19yy is assumed) In the PSL compatibility format the current year is used when yy is omitted. |
| event status that is valid for the event report *Valid Values* O OPEN A ACKNOWLEDGED C CLOSED E ESCALATED D DELETED*Examples* - "O,A,C,D" matches all statuses except ESCALATED
- "O,A,C,E,D" or " " matches all statuses
- "O,C" matches only statuses OPEN and CLOSED
|
| event type that is valid for the event report *Valid Values* I INFORMATION S CHANGE_STATUS E ERROR W WARNING A ALARM R RESPONSE*Examples* - "S,E,W,A,R" matches all event types except INFORMATION
- "I,S,E,W,A,R" or " " matches all event types
- "W,A" matches only event types WARNING and ALARM
|
| computer system name that is valid for the event report *Valid Values* - " " indicating all computer systems listed in the PEM repository
- character string indicating a specific host name
|
| application instance or class name that is valid for the event report *Valid Values* - " " for all application classes
- character string indicating a specific application instance or class
|
| character string within the event description field that is valid for the event report *Valid Values* - " " indicating any characters
- character string
|
| string that defines the range of PATROL event IDs that are valid for the event report Valid Values x event ID x x/y event IDs between and including x and y -/y event IDs less than and including y x/- event IDs greater than and including x -/- all events (" " is also valid) x and y are integers in the following range: 0 ≤ x ≤ y ≤ 2,147,483,647 |
| event class that is valid for the event report Valid Values ■ " " indicating all event classes ■ character string specifying a specific event class |
| lowest event severity that is valid for the event archival Valid Values ■ string containing an integer between 1 and 5 with 5 being the most severe ■ entering "1" returns events of all severity Default Value " " is the same as "2" |
Note
When the two digit year, yy, is specified with the PSL compatible time format for the start-time and stop-time parameters, the function assumes the year is 19 yy. You should either omit the year when using this format, or use a different date format if you need to specify the year.
Description
The event_report() function returns statistics for events in the PATROL event repository that match the specified filter criteria. The event_report() function returns the empty string if no events match the filter.
Output
The following is a sample of the statistics returned by the event_report() function:
Number of events in the Repository: 821
Number of events in cache: 134
Number of events on disk: 687
Status
OPEN: 821
ACKNOWLEDGED: 0
CLOSED: 0
ESCALATED: 0
DELETED: 0
Type
ALARM: 3
WARNING: 10
ERROR: 0
STATE_CHANGE: 806
INFORMATION: 2
RESPONSE: 0
Time
First event: Tue Mar 19 03:34:43 1996
Last event: Tue Mar 19 08:25:51 1996
Event Id
Smallest Id: 14595
Greatest Id: 16069
Event size:
Average event size: 225 bytes
Maximum event size: 287 bytes
Example
The following is an example of the event_report() function:
print(
"event statistics\n",
event_report( # filter definition starts here:
"", # any start time
"0407101596", # only events before 04-07-96 10:15
"O", # only OPEN status
"A", # only ALARM type
"", # any computer system
"SAP", # only event originating from SAP
"", # any description text
"-/-", # any event ID
"", # any event class
"" # any event severity
)
. "\n"
);