§³§Ý§Ö§Õ§Ö?§Ú §à§Ò?§Ö§Ü§ä§Ú §ã§å §Õ§Ú§â§Ö§Ü§ä§ß§à §á§à§Ó§Ö§Ù§Ñ§ß§Ú §ã§Ñ event
´¡±Ê±õ-?§Ö§Þ.
§¥§à§Ô§Ñ?§Ñ?§Ö §Ü§â§Ö§Ú§â§Ñ Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â §Ú §ß§Ö §Þ§à§Ô§å §ã§Ö §Þ§Ö?§Ñ§ä§Ú §á§â§Ö§Ü§à API-?§Ñ.
§°§Ò?§Ö§Ü§Ñ§ä §Õ§à§Ô§Ñ?§Ñ?§Ñ §Ú§Þ§Ñ §ã§Ý§Ö§Õ§Ö?§Ñ §ã§Ó§à?§ã§ä§Ó§Ñ. |Property|Type|§°§á§Ú§ã| |--|--|------| |eventid|ID|ID §Õ§à§Ô§Ñ?§Ñ?§Ñ.| |source|integer|§´§Ú§á §Õ§à§Ô§Ñ?§Ñ?§Ñ.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú:
0 ¨C §Õ§à§Ô§Ñ?§Ñ? §Ü§â§Ö§Ú§â§Ñ§ß §à§Ü§Ú§Õ§Ñ§é§Ö§Þ;
1 ¨C §Õ§à§Ô§Ñ?§Ñ? §Ü§â§Ö§Ú§â§Ñ§ß §á§â§Ñ§Ó§Ú§Ý§à§Þ §à§ä§Ü§â§Ú§Ó§Ñ?§Ñ;
2 ¨C §Õ§à§Ô§Ñ?§Ñ? §Ü§â§Ö§Ú§â§Ñ§ß §à§Õ §ã§ä§â§Ñ§ß§Ö §Ñ§å§ä§à§Þ§Ñ§ä§ã§Ü§Ñ §â§Ö§Ô§Ú§ã§ä§â§Ñ§è§Ú?§Ñ §Ñ§Ü§ä§Ú§Ó§ß§à§Ô §Ñ§Ô§Ö§ß§ä§Ñ;
3 - §Ú§ß§ä§Ö§â§ß§Ú §Õ§à§Ô§Ñ?§Ñ?;
4 - §Õ§à§Ô§Ñ?§Ñ? §Ü§â§Ö§Ú§â§Ñ§ß §á§â§Ú §Ñ§Ø§å§â§Ú§â§Ñ?§å §ã§ä§Ñ§ä§å§ã§Ñ §å§ã§Ý§å§Ô§Ö.| |object|integer|§´§Ú§á §à§Ò?§Ö§Ü§ä§Ñ §Ü§à?§Ú ?§Ö §á§à§Ó§Ö§Ù§Ñ§ß §ã§Ñ §Õ§à§Ô§Ñ?§Ñ?§Ö§Þ.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú §Ñ§Ü§à ?§Ö source
?§Ö §á§à§Õ§Ö§ê§Ö§ß §ß§Ñ "event created by a trigger":
0 - §à§Ü§Ú§Õ§Ñ§é.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú §Ñ§Ü§à ?§Ö source
§á§à§Õ§Ö§ê§Ö§ß §ß§Ñ "event created by a discovery rule"":
1 - §à§ä§Ü§â§Ú§Ó§Ö§ß §Õ§à§Þ§Ñ?§Ú§ß;
2 - §à§ä§Ü§â§Ú§Ó§Ö§ß§Ñ §å§ã§Ý§å§Ô§Ñ.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú §Ñ§Ü§à ?§Ö source
§á§à§Õ§Ö§ê§Ö§ß §ß§Ñ "event created by active agent autoregistration":
3 - §Ñ§å§ä§à§Þ§Ñ§ä§ã§Ü§Ú §â§Ö§Ô§Ú§ã§ä§â§à§Ó§Ñ§ß§Ú §Õ§à§Þ§Ñ?§Ú§ß.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú §Ñ§Ü§à ?§Ö ?§Ú§Ù§Ó§à§â¡° §á§à§Õ§Ö§ê§Ö§ß §ß§Ñ ?§Ú§ß§ä§Ö§â§ß§Ú §Õ§à§Ô§Ñ?§Ñ?¡°:
0 ¨C §à§Ü§Ú§Õ§Ñ§é;
4 ¨C §ã§ä§Ñ§Ó§Ü§Ñ;
5 ¨C §§§¥ §á§â§Ñ§Ó§Ú§Ý§à.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú §Ñ§Ü§à ?§Ö ? source¡° §á§à§Õ§Ö§ê§Ö§ß §ß§Ñ "event created on service status update"":
6 - §å§ã§Ý§å§Ô§Ñ.| |objectid|ID|ID §á§à§Ó§Ö§Ó§Ñ§ß§à§Ô §à§Ò?§Ö§Ü§ä§Ñ.| |acknowledged|integer|§¥§Ñ §Ý§Ú ?§Ö §Õ§à§Ô§Ñ?§Ñ? §á§à§ä§Ó§â?§Ö§ß.| |clock|timestamp|§£§â§Ö§Þ§Ö §Ü§Ñ§Õ§Ñ §Õ§à§Ô§Ñ?§Ñ? ?§Ö §Ü§â§Ö§Ú§â§Ñ§ß.| |ns|integer|§¯§Ñ§ß§à§ã§Ö§Ü§å§ß§Õ§Ö §Ü§Ñ§Õ§Ñ ?§Ö §Õ§à§Ô§Ñ?§Ñ? §Ü§â§Ö§Ú§â§Ñ§ß.| |name|string|§ª§Þ§Ö §â§Ñ§Ù§â§Ö§ê§Ö§ß§à§Ô §Õ§à§Ô§Ñ?§Ñ?§Ñ.| |value|integer|§³§ä§Ñ?§Ö §á§à§Ó§Ö§Ù§Ñ§ß§à§Ô §à§Ò?§Ö§Ü§ä§Ñ.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú §Ñ§Ü§à ?§Ö source
?§Ö §á§à§Õ§Ö§ê§Ö§ß §ß§Ñ "event created by a trigger" §Ú§Ý§Ú "event created on service status update":
0 - §°§¬;<§Ò§â>1 - §á§â§à§Ò§Ý§Ö§Þ.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú §Ñ§Ü§à ?§Ö source
§á§à§Õ§Ö§ê§Ö§ß §ß§Ñ "event created by a discovery rule":
0 - §Õ§à§Þ§Ñ?§Ú§ß §Ú§Ý§Ú ?§Ö §ã§Ö§â§Ó§Ú§ã §å §æ§å§ß§Ü§è§Ú?§Ú;
1 - §Õ§à§Þ§Ñ?§Ú§ß §Ú§Ý§Ú §å§ã§Ý§å§Ô§Ñ §ß§Ö §â§Ñ§Õ§Ö;
2 - §Õ§à§Þ§Ñ?§Ú§ß §Ú§Ý§Ú §å§ã§Ý§å§Ô§Ñ ?§Ö §à§ä§Ü§â§Ú§Ó§Ö§ß§Ñ;
3 - §Ú§Ù§Ô§å§Ò?§Ö§ß§Ú §Õ§à§Þ§Ñ?§Ú§ß §Ú§Ý§Ú §å§ã§Ý§å§Ô§Ñ.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú §Ñ§Ü§à ?§Ö ? source¡° §á§à§Õ§Ö§ê§Ö§ß §ß§Ñ ?internal event"¡°:
0 ¨C "§ß§à§â§Þ§Ñ§Ý§ß§à¡° §ã§ä§Ñ?§Ö;
1 ¨C "§ß§Ö§á§à§Ù§ß§Ñ§ä§à¡° §Ú§Ý§Ú "§ß§Ú?§Ö §á§à§Õ§â§Ø§Ñ§ß§à¡° §ã§ä§Ñ?§Ö.
<br >Property behavior:
- §á§à§Õ§â§Ø§Ñ§ß§à §Ñ§Ü§à ?§Ö source
§á§à§Õ§Ö§ê§Ö§ß §ß§Ñ "event created by a trigger", "event created by a discovery rule", " internal event", §Ú§Ý§Ú "event created on service status update"| |severity|integer|§´§â§Ö§ß§å§ä§ß§Ñ §à§Ù§Ò§Ú?§ß§à§ã§ä §Õ§à§Ô§Ñ?§Ñ?§Ñ.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú:
0 - §ß§Ú?§Ö §Ü§Ý§Ñ§ã§Ú§æ§Ú§Ü§à§Ó§Ñ§ß§à;
1 - §Ú§ß§æ§à§â§Þ§Ñ§è§Ú?§Ñ;
2 - §å§á§à§Ù§à§â§Ö?§Ö;
3 - §á§â§à§ã§Ö§é§Ñ§ß;
4 - §Ó§Ú§ã§à§Ü;
5 - §Ü§Ñ§ä§Ñ§ã§ä§â§à§æ§Ñ.| |r_eventid|ID|ID §Õ§à§Ô§Ñ?§Ñ?§Ñ §à§á§à§â§Ñ§Ó§Ü§Ñ.| |c_eventid|ID|ID §Õ§à§Ô§Ñ?§Ñ? §Ü§à?§Ú ?§Ö §Ü§à§â§Ú§ê?§Ö§ß §Õ§Ñ §ã§Ö §Ù§Ñ§Þ§Ö§ß§Ú (§Ù§Ñ§ä§Ó§à§â§Ú) §ä§â§Ö§ß§å§ä§ß§Ú §Õ§à§Ô§Ñ?§Ñ? §á§â§Ö§Þ§Ñ §á§â§Ñ§Ó§Ú§Ý§å §Ô§Ý§à§Ò§Ñ§Ý§ß§Ö §Ü§à§â§Ö§Ý§Ñ§è§Ú?§Ö. §±§à§Ô§Ý§Ö§Õ§Ñ?§ä§Ö correlationid
§Õ§Ñ §Ò§Ú§ã§ä§Ö §Ú§Õ§Ö§ß§ä§Ú§æ§Ú§Ü§à§Ó§Ñ§Ý§Ú §ä§Ñ§é§ß§à §á§â§Ñ§Ó§Ú§Ý§à §Ü§à§â§Ö§Ý§Ñ§è§Ú?§Ö.<§Ò§â>§°§Ó§Ñ? §á§Ñ§â§Ñ§Þ§Ö§ä§Ñ§â ?§Ö §Õ§Ö§æ§Ú§ß§Ú§ã§Ñ§ß §ã§Ñ§Þ§à §Ü§Ñ§Õ§Ñ ?§Ö §Õ§à§Ô§Ñ?§Ñ? §Ù§Ñ§ä§Ó§à§â§Ö§ß §Ô§Ý§à§Ò§Ñ§Ý§ß§Ú§Þ §á§â§Ñ§Ó§Ú§Ý§à§Þ §Ü§à§â§Ö§Ý§Ñ§è§Ú?§Ö.| |cause_eventid|ID|ID §å§Ù§â§à§Ü§Ñ §Õ§à§Ô§Ñ?§Ñ?§Ñ.| |correlationid|ID|ID §Ü§à§â§Ö§Ý§Ñ§è§Ú?§Ö §á§â§Ñ§Ó§Ú§Ý§à §Ü§à?§Ö ?§Ö §Ô§Ö§ß§Ö§â§Ú§ã§Ñ§Ý§à §Ù§Ñ§ä§Ó§Ñ§â§Ñ?§Ö §á§â§à§Ò§Ý§Ö§Þ§Ñ.<§Ò§â>§°§Ó§Ñ? §á§Ñ§â§Ñ§Þ§Ö§ä§Ñ§â ?§Ö §Õ§Ö§æ§Ú§ß§Ú§ã§Ñ§ß §ã§Ñ§Þ§à §Ü§Ñ§Õ§Ñ ?§Ö §Õ§à§Ô§Ñ?§Ñ? §Ù§Ñ§ä§Ó§à§â§Ö§ß §á§â§Ñ§Ó§Ú§Ý§à§Þ §Ô§Ý§à§Ò§Ñ§Ý§ß§Ö §Ü§à§â§Ö§Ý§Ñ§è§Ú?§Ö.| |userid|ID|ID §Ü§à§â§Ú§ã§ß§Ú§Ü§Ñ §Ü§à?§Ú ?§Ö §Ù§Ñ§ä§Ó§à§â§Ú§à §Õ§à§Ô§Ñ?§Ñ? (§Ñ§Ü§à ?§Ö §Õ§à§Ô§Ñ?§Ñ? §Ù§Ñ§ä§Ó§à§â§Ö§ß §â§å§é§ß§à).| |suppressed|integer|§¥§Ñ §Ý§Ú ?§Ö §Õ§à§Ô§Ñ?§Ñ? §á§à§ä§Ú§ã§ß§å§ä.
§®§à§Ô§å?§Ö §Ó§â§Ö§Õ§ß§à§ã§ä§Ú:<§Ò§â>0 - §Õ§à§Ô§Ñ?§Ñ? ?§Ö §å §ß§à§â§Þ§Ñ§Ý§ß§à§Þ §ã§ä§Ñ?§å;
1 - §Õ§à§Ô§Ñ?§Ñ? ?§Ö §á§à§ä§Ú§ã§ß§å§ä.| |opdata|string|§°§á§Ö§â§Ñ§ä§Ú§Ó§ß§Ú §á§à§Õ§Ñ§è§Ú §ã§Ñ §á§â§à§ê§Ú§â§Ö§ß§Ú§Þ §Þ§Ñ§è§â§à§ã.| |urls|array|§¡§Ü§ä§Ú§Ó§Ñ§ß media type URLs.|
§°§Ò?§Ö§Ü§Ñ§ä §à§Ù§ß§Ñ§Ü§Ö §Õ§à§Ô§Ñ?§Ñ?§Ñ §Ú§Þ§Ñ §ã§Ý§Ö§Õ§Ö?§Ñ §ã§Ó§à?§ã§ä§Ó§Ñ.
Property | Type | Description |
---|---|---|
tag | string | §ª§Þ§Ö §à§Ù§ß§Ñ§Ü§Ö §Õ§à§Ô§Ñ?§Ñ?§Ñ. |
value | string | §£§â§Ö§Õ§ß§à§ã§ä §à§Ù§ß§Ñ§Ü§Ö §Õ§à§Ô§Ñ?§Ñ?§Ñ. |
URL §à§Ò?§Ö§Ü§Ñ§ä §ä§Ú§á§Ñ §Þ§Ö§Õ§Ú?§Ñ §Ú§Þ§Ñ §ã§Ý§Ö§Õ§Ö?§Ñ §ã§Ó§à?§ã§ä§Ó§Ñ.
Property | Type | §°§á§Ú§ã |
---|---|---|
name | string | URL §Ú§Þ§Ö §Õ§Ö§æ§Ú§ß§Ú§ã§Ñ§ß§à §Ù§Ñ §ä§Ú§á §Þ§Ö§Õ§Ú?§Ñ. |
url | string | §¥§Ö§æ§Ú§ß§Ú§ã§Ñ§ß§Ñ URL §Ó§â§Ö§Õ§ß§à§ã§ä §ä§Ú§á§Ñ §Þ§Ö§Õ§Ú?§Ñ. |
§²§Ö§Ù§å§Ý§ä§Ñ§ä§Ú ?§Ö §ã§Ñ§Õ§â§Ø§Ñ§ä§Ú §å§ß§à§ã§Ö §ã§Ñ§Þ§à §Ù§Ñ §Ñ§Ü§ä§Ú§Ó§ß§Ö §ä§Ú§á§à§Ó§Ö §Þ§Ö§Õ§Ú?§Ñ §ã§Ñ §à§Þ§à§Ô§å?§Ö§ß§Ú§Þ §å§ß§à§ã§à§Þ §å §Þ§Ö§ß§Ú §Õ§à§Ô§Ñ?§Ñ?§Ñ. §®§Ñ§Ü§â§à §Ü§à?§Ú §ã§Ö §Ü§à§â§Ú§ã§ä§Ú §å §ã§Ó§à?§ã§ä§Ó§Ú§Þ§Ñ ?§Ö §Ò§Ú§ä§Ú §á§â§à§ê§Ú§â§Ö§ß, §Ñ§Ý§Ú §Ñ§Ü§à ?§Ö§Õ§ß§à §à§Õ §ã§Ó§à?§ã§ä§Ñ§Ó§Ñ §ã§Ñ§Õ§â§Ø§Ú §ß§Ö§á§â§à§ê§Ú§â§Ö§ß§Ú §Þ§Ñ§Ü§â§à, §à§Ò§Ñ §ã§Ó§à?§ã§ä§Ó§Ñ ?§Ö §Ò§Ú§ä§Ú §Ú§ã§Ü?§å§é§Ö§ß§Ñ §Ú§Ù §â§Ö§Ù§å§Ý§ä§Ñ§ä§Ñ. §©§Ñ §á§à§Õ§â§Ø§Ñ§ß§Ö §Þ§Ñ§Ü§â§à§Ö §á§à§Ô§Ý§Ö§Õ§Ñ?§ä§Ö Supported macros.