Supported SMF field names
The following is a list of all fields supported by BMC AMI Datastream.
For each statement, a table presents the following information:
- Name (Filter)—Names of the operands and, where available, the type of filter
Code the name as one of the operands of a FIELDS parameter. If a filter type is displayed in parentheses, then filtering is available for the operand. You can code the name as one of the operands of a FILTer or MATCH parameter, and you can filter according to the type. For more information, see Filtering-in-and-filtering-out-events.
Most field names are the same as, or similar to, the IBM SMF record field names. Field names that end with a D are textual descriptions. For example, SMF80EVTQD is the SMF type 80 record fields SMF80EVT and SMF80EVQ converted to text.
The FIELDS parameter is not case-sensitive. - Tag, CEF name—Tags as they appear in a syslog message and, if applicable, the standard CEF names
For more information, see Common Event Format (CEF) in the Proprietary-syslog-format-extensions topic. Tags are displayed in mixed case (see TAGCase in the OPTIONS-statement topic). - Description—Descriptions of the operands
Many of the descriptions are the same as, or similar to, the IBM descriptions. Where relevant, the source of the descriptions is cited.
This section contains the following topics:
Related topic
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*