Create an Event

post

/api/event/Events

Creates a new event. If it is a duplicate event, the Count, Severity, LastReported, EventCategory, and Summary fields of the existing event are updated rather than creating another event. This endpoint does not support custom deduplication.

Request

There are no request parameters for this operation.

Supported Media Types
Request Body - application/json ()
Root Schema : schema
Type: object
Show Source
Back to Top

Response

Supported Media Types

200 Response

Successful operation
Body ()
Root Schema : schema
Match All
Show Source
Nested Schema : SuccessfulAddOperation
Type: object
Show Source
Nested Schema : type
Type: object
Show Source
Nested Schema : data
Type: array
The properties of the new event.
Show Source
Nested Schema : metaData
Type: array
The metadata associated with the method.
Show Source
Nested Schema : eventEventsReadData
Type: object
Show Source
  • Indicates if the event has been flagged as acknowledged. Events will be displayed differently based on Ack. - 0 -> N0 - 1 -> Yes
    Example: 1
  • Action is an indication for a non-human entity that caused a change to be made.
    Example: SQL Tool: Acknowledge
  • Actor is an indication of the entity that caused the change to be made.
    Example: admin
  • The number of times this Event has happened (deduplicated)
    Example: 1963
  • Customer can be set to a value when needed
    Example:
  • Customer.rules will set this to Unknown if not previously set.
    Example: Unknown
  • Details of the event (a JSON text)
    Example: {"ThresholdName":"Device Down","Time":"1667230800","InstanceName":"Device","ThresholdTimeRange":900,"ThresholdTypeName":"Standard Threshold","ThresholdSeverity":5,"MetricValue":0,"ThresholdOperator":"==","DeviceName":"router.example.com","ThresholdType":"1","ThresholdMessage":"Performance threshold violation: Device Down","Measurement":"metrictype_Latency","ThresholdValue":"0"}
  • Device Type is used as a general category for the event. Customer.rules will set this to Unknown if not previously set.
    Example: Unknown
  • Duration for which the event occurred (LastReported - FirstReported)
    Example: 24417000.000
  • If an event should be escalated or not. ??? 0 = no ??? 1 = should be escalated ??? 2 = has been escalated
    Example: 0
  • Event Category - 1 -> Resolution - 2 -> Problem - 3 -> Discrete
    Example: Problem
  • Event ID specified for individual read operations
    Example: 57341
  • Event Key
    Example: Standard Threshold-router1.example.com-Device Down-Device
  • Type of the Event (ex. linkUpDown for a linkDown trap)
    Example: Device Down
  • Time at which the event expired (Number of seconds after LastChanged for this Event to become eligible-to-be-deleted, which is done by the mechanization DeleteExpired)
    Example: 0
  • Timestamp when event was first reported
    Example: 2022-10-31 10:40:00.000
  • An object containing a longitude and latitude denoting a geographic location related to the event.
    Example: {"type": "Point", "coordinates": [0.0, 0.0]}
  • An object containing a pair of longitude and latitude coordinates denoting a geographic path related to the event.
    Example: {"type": "LineString", "coordinates": [[0.0, 0.0], [0.0, 0.0]]}
  • The IPv4 or IPv6 address of the Device associated with this Event
    Example: 100.77.1.4
  • Timestamp when event was last changed
    Example: 2023-08-10 01:10:00.000
  • Timestamp when event was last reported
    Example: 2023-08-10 01:10:00.000
  • Name, Address, or something similar associated with the Event. Event Analytics will use this if it is set.
    Example:
  • Protocol of how the event was received/retrieved. The binary will set a default value (Trapd, Syslogd, for example), but can be update in rules, if needed.
    Example: StandardThresholdEngined
  • The name of the device where the event happened (usually the DNS name of the device associated with the event)
    Example: router1.example.com
  • The original severity when the event was first created.
    Example: 5
  • The name of the currently-responsible person. Some event Tools (for example, "Acknowledge", "Delete", and "Take Ownership") set this to the username that executed the tool; "UnAcknowledge" sets it to 0.
    Example: admin
  • Used by applications to know whether the event is being processed as a root cause of another event or not.
    Example: 0
  • Used by applications to know whether the event was caused by another event or not.
    Example: 0
  • If a Priority value is set on a device, this field can be set to the event Severity * Priority to increase the number. Event Filters can be configured to show the hi-score Events first, or other processing may utilize this value.
    Example: 0
  • The SLM applications will set this to the name of the SLM Service if a violation is detected.
    Example:
  • Flag to indicate a provided service has been impacted. Allowed values: - 0 = Not service impacting - 1 = Service impacting
    Example: 0
  • Must be a value between 0 - 5. The event will change colors in the Event List based on the severity. Allowed Values: - 0 => Normal - 1 => Unknown - 2 => Info - 3 => Minor - 4 => Major - 5 => Critical
    Example: Critical
  • Shard to query (defaults to 1)
    Example: 1
  • Used for vendor or model information for the event. Customer.rules will set this to Unknown if not previously set.
    Example: Unknown
  • Usually set in rules to the specific processing that was done on the event, for example, the MIB that defines the trap, or the string "watchdog", or "Unknown".
    Example: Standard Threshold
  • The Instance of the Event, for example, the ifIndex value of a linkUp trap. Mechanization CorrelateProblemResolutions requires that this is the same for correlating events
    Example: Device
  • Event description
    Example: Device Down with availability 0.00% == 0%
  • A flag for the ticket state of this event. - 0 = no ticket - 1 = ticket to be created - 2 = processing - 3 = opened
    Example: 0
  • The Ticket ID associated with this Event in the external system. Should be populated by the process done to open the ticket in the external system.
    Example:
  • Can be set to the Device Zone that the device is in.
    Example: 5
Nested Schema : eventEventsReadMetaData
Type: object
Show Source
Nested Schema : columns
Type: array
Show Source
Example:
[
    {
        "text":"<div class=\"fa fa-link\"></div>",
        "tooltip":"Indicates correlated symptom events",
        "dataIndex":"RootCauseFlag",
        "align":"left",
        "filter":false,
        "sortable":false,
        "hidden":false,
        "menuDisabled":true,
        "width":34
    },
    {
        "header":"EventID",
        "dataIndex":"EventID",
        "align":"left",
        "filter":"int",
        "hidden":true,
        "width":100
    },
    {
        "header":"ShardID",
        "dataIndex":"ShardID",
        "align":"left",
        "filter":"int",
        "hidden":true,
        "width":60
    },
    {
        "header":"Device",
        "dataIndex":"Node",
        "align":"left",
        "filter":"string",
        "hidden":false,
        "width":300
    },
    {
        "header":"Event Type",
        "dataIndex":"EventType",
        "align":"left",
        "filter":"string",
        "hidden":false,
        "width":200
    },
    {
        "header":"Event Text",
        "dataIndex":"Summary",
        "align":"left",
        "filter":"string",
        "hidden":false,
        "flex":1,
        "minWidth":100
    },
    {
        "header":"Count",
        "dataIndex":"Count",
        "align":"center",
        "filter":"int",
        "hidden":false,
        "width":70
    },
    {
        "header":"First Occurred",
        "dataIndex":"FirstReported",
        "align":"center",
        "filter":"datetime",
        "hidden":false,
        "width":190
    },
    {
        "header":"Last Occurred",
        "dataIndex":"LastReported",
        "align":"center",
        "filter":"datetime",
        "hidden":false,
        "width":190
    },
    {
        "header":"Last Changed",
        "dataIndex":"LastChanged",
        "align":"center",
        "filter":"datetime",
        "hidden":true,
        "width":120
    },
    {
        "header":"EventKey",
        "dataIndex":"EventKey",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"EventCategory",
        "dataIndex":"EventCategory",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Ack",
        "dataIndex":"Ack",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Action",
        "dataIndex":"Action",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Actor",
        "dataIndex":"Actor",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Customer",
        "dataIndex":"Customer",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Department",
        "dataIndex":"Department",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Details",
        "dataIndex":"Details",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"DeviceType",
        "dataIndex":"DeviceType",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Duration",
        "dataIndex":"Duration",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"EscalationFlag",
        "dataIndex":"EscalationFlag",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"ExpireTime",
        "dataIndex":"ExpireTime",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"GeoPath",
        "dataIndex":"GeoPath",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"GeoLocation",
        "dataIndex":"GeoLocation",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"IPAddress",
        "dataIndex":"IPAddress",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Location",
        "dataIndex":"Location",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Method",
        "dataIndex":"Method",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"OrigSeverity",
        "dataIndex":"OrigSeverity",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"OwnerName",
        "dataIndex":"OwnerName",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"RootCauseFlag",
        "dataIndex":"RootCauseFlag",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"RootCauseID",
        "dataIndex":"RootCauseID",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Score",
        "dataIndex":"Score",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Service",
        "dataIndex":"Service",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"ServiceImpact",
        "dataIndex":"ServiceImpact",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"Severity",
        "dataIndex":"Severity",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"SubDeviceType",
        "dataIndex":"SubDeviceType",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"SubMethod",
        "dataIndex":"SubMethod",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"SubNode",
        "dataIndex":"SubNode",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"TicketFlag",
        "dataIndex":"TicketFlag",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"TicketID",
        "dataIndex":"TicketID",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    },
    {
        "header":"ZoneID",
        "dataIndex":"ZoneID",
        "align":"left",
        "filter":"string",
        "hidden":true,
        "width":120
    }
]
Nested Schema : fields
Type: array
fields within the data object (Events)
Show Source
Example:
[
    "EventID",
    "ShardID",
    "Node",
    "EventType",
    "Summary",
    "Count",
    "FirstReported",
    "LastReported",
    "LastChanged",
    "EventKey",
    "EventCategory",
    "Ack",
    "Action",
    "Actor",
    "Customer",
    "Department",
    "Details",
    "DeviceType",
    "Duration",
    "EscalationFlag",
    "ExpireTime",
    "GeoPath",
    "GeoLocation",
    "IPAddress",
    "Location",
    "Method",
    "OrigSeverity",
    "OwnerName",
    "RootCauseFlag",
    "RootCauseID",
    "Score",
    "Service",
    "ServiceImpact",
    "Severity",
    "SubDeviceType",
    "SubMethod",
    "SubNode",
    "TicketFlag",
    "TicketID",
    "ZoneID"
]
Nested Schema : severity
Type: object
Object containing number of all type of severities
Example:
{
    "normal":11,
    "unknown":1,
    "info":1,
    "minor":1620,
    "major":809,
    "critical":165,
    "all":2607,
    "sum":130887185
}
Nested Schema : items
Type: object

Default Response

Failed operation
Body ()
Root Schema : schema
Type: object
Show Source
Nested Schema : errors
Type: array
The list of errors reported. Validation errors will be keyed by record field.
Show Source
Nested Schema : items
Type: object
Back to Top