Details for Events

This topic provides details for Events logs.

Resources

  • rules

Log Categories

API value (ID): Console (Display Name) Description
ruleexecutionlog Rule Execution Logs Describes how rules were evaluated against events emitted from resources.

Availability

Events logging is available in all the regions of the commercial realm. Events logging is not available in regions within the Government Cloud realm.

Contents of an Events Log

Property Description
logTime The time of the event, expressed in RFC 3339 timestamp format.
ruleId The events rule ID.
eventId The UUID of the event. This identifier is not an OCID, but just a unique ID for the event.
message The event message.
target The rule action. For example:
  • For streaming, it means that the event was delivered to the stream.
  • For a notification, it means it was delivered to the email subscribed to the topic.
  • For a function, it means it triggered the function with the event data.

An Example Events Log

For events there are two types of messages:
{
  "specversion": "1.0",
  "type": "com.oraclecloud.eventsservice.eventrule.ruleexecutionlog",
  "source": "Flowlogs",
  "id": "6e6dbfd3-4bce-4484-848d-af53f19bd6c9",
  "time": "2020-08-24T23:31:44Z",
  "oracle": {
    "logid": "ocid1.log.oc1.iad.<unique_ID>",
    "loggroupid": "ocid1.loggroup.oc1.iad.<unique_ID>",
    "compartmentid": "ocid1.compartment.oc1..<unique_ID>",
    "tenantid": "ocid1.tenancy.oc1..<unique_ID>",
    "ingestedtime": "2020-08-19T15:33:30.832Z"
  },
  "data": {
    "ruleId": "ocid1.eventrule.oc1.iad.<unique_ID>",
    "eventId": "24bc7219-efec-4ccd-350b-be2d833439d2",
    "message": "Event failed to deliver to FAAS. Exception from FAAS endpoint 
     https://ptktjbkp22a.us-ashburn-1.functions.oci.oraclecloud.com, exception message: 
     (502, FunctionInvokeImageNotAvailable, false) Failed to pull function image (opc-request-id:
     AA3D3CEE50107C103AA662B8646A0EEE/01EGHCZXNW1BT0750ZJ0058HCP/01EGHCZXNW1BT0750ZJ0058HCQ),
     opc-request-id AA3D3CEE50107C103AA662B8646A0EEE/01EGHCZXNW1BT0750ZJ0058HCP/01EGHCZXNW1BT0750ZJ0058HCQ,
     statuscode 502", "target": "ocid1.fnfunc.oc1.iad.<unique_ID>"
  }
}
{
  "specversion": "1.0",
  "type": "com.oraclecloud.eventsservice.eventrule.ruleexecutionlog",
  "source": "cmi-push-vcn-splunk-phoenix",
  "id": "52007b4c-225e-4d6c-9dea-077b884a94e9",
  "time": "2020-08-24T23:35:16Z",
  "oracle": {
    "logid": "ocid1.log.oc1.iad.<unique_ID>",
    "loggroupid": "ocid1.loggroup.oc1.iad.<unique_ID>",
    "compartmentid": "ocid1.compartment.oc1..<unique_ID>",
    "tenantid": "ocid1.tenancy.oc1..<unique_ID>",
    "ingestedtime": "2020-08-19T15:33:30.832Z"
  },
  "data": {
    "ruleId": "ocid1.eventrule.oc1.phx.<unique_ID>",
    "eventId": "30bde0fa-af8a-f50c-aa01-4fc42f28acb9",
    "message": "Rule has matched event"
  }
}

Events Log Object Name

Objects that store Events log data use the following naming format:

Rule_Execution_Log/<event_rule_OCID>/<YYYY-MM-DDTHH_MMZ>[_<seqNum>].log.gz

For example:

Rule_Execution_Log/ocid1.eventrule.oc1.phx.<unique_ID>/2019-03-21T00_00Z.log.gz
Rule_Execution_Log/ocid1.eventrule.oc1.phx.<unique_ID>/2019-03-21T00_00Z_2.log.gz