Events
This section covers what you may see within Unified Assurance when you click on the "Events" link in the navigation pane in the main user interface.
What is an Event?
Unified Assurance Fault Manager is a manager of managers (MOM) that aggregates and correlates fault and event information from infrastructure components and the services they deliver. Event collection from devices, systems, and/or external EMS/NMS systems is handled by various aggregators and connectors. These data collection methods support collection of event data using a variety of device interface methods, such as syslog, SNMP Trap, eMail, and TL1. Event collection also supports collection of events from external systems via flat file, TCP socket, and database queries. The base functionality supported during the event collection process is the de-duplication of events.
Once events have been collected into the real-time events engine, a number of tools are available including correlation tools, event enrichment tools, ticketing connectors for links to external ticketing systems, and notification tools.
The display functionality of the module provides customizable event lists. These event lists allow for the operator's interaction with presented events to be customized with the creation and use of context-click event list tools, event filters, and integration with the embedded Knowledge Base.
With the addition of the SLM Event Connector software, service hierarchies can be created with thresholds and meta events to generate SLM impacted events.
How do I create an event list Filter?
The following interfaces are used to create a filter:
Events Navigation Explained
When the Events navigation pane is displayed, you will see the below layout. Next to each filter will be an icon that represents the filter's event status, and the color will change based on the highest severity event for that filter. This means that if a filter has two Info events and two Major events, since Major has the higher severity level, the icon color will be that of the Major severity. Clicking on the icon will display all of the events for the filter. Hovering over the icon will display the count of events by severity that are returned by the filter.
When you select an available Filter, a view is opened with the Event List panel, which can be customized with several options to support a multi-tenant environment. See the following guide for additional information:
You will see the following in the view:
-
Private Filters: When this group is expanded, this folder will display any Event Filters that have the User Owner set to the logged in user.
-
Filters by Group: When this group is expanded, this folder will display the Event Filter Group that has been assigned as your user groups Restrictive Event Filter Group, and any event Filters that are in the group. You will also see child Event Filter Groups and any Events Filters in the child groups. For example, using this layout:
-
Root (Event Filter Group)
-
Event Filter Group 1
-
Event Filter Group 3
-
Event Filter E
-
Event Filter F
-
-
Event Filter C
-
-
Event Filter Group 2
- Event Filter D
-
Event Filter A
-
Event Filter B
-
If the user group's restrictive event filter group is set to Root, you will see the entire layout above.
If the user group's restrictive event filter group is set to Event Filter Group 1, you will see Event Filter C as it is a member of Event Filter Group 1. You will also see Event Filter Group 3, which can be expanded to show Event Filter E and Event Filter F.
Note:
If a restrictive group is not set, the UI will default to using the Root group.
-
-
Filters by MetaTags: When this group is expanded, this folder will display any device-level Meta Types that have been assigned to devices in the Device Catalog. Each Meta Type is also a "folder" that can be expanded, which will then show the Meta Tags that have been assigned to devices with the Meta Type. The Meta Tags can be clicked on to view the events for devices with the Meta Type/Meta Tag combination.