1. REST API for Unified Assurance Core
  2. Tasks
  3. Event
  4. Watcher Policies

Update an Event Watcher Policy

put

/api/event/WatcherPolicies/{id}

Updates the event watcher policy that matches the specified ID.

Request

Path Parameters
Supported Media Types
Request Body - application/json ()
Root Schema : schema
Type: object
Show Source
  • Indicates which type of action to take when a threshold is crossed. - event => Meta Event - notification => Notification profile
    Example: event
  • Comma-separated list of notification recipients.
    Example:
  • ID of the notification profile.
    Example: 0
  • ID of the notification template.
    Example: 0
  • Event Watcher Policy Description
    Example: For any Login Failures by Node in the last 15 mins If any login failures occur and the Sum of Count >= 3, create this event.
  • The ID of the Meta Event that should be dispatched if the threshold condition is met for the filtered metrics
    Example: 3
  • SQL used to select which events will be processed by this CAPE Policy's node(s)
    Example: (EventType = 'LoginLogout' AND Severity > 1 AND LastReported > (UNIX_TIMESTAMP() - 900))
  • A SQL "GROUP BY" clause that allows the filtered metrics to be grouped. Valid format is empty or a comma-delimited list of one or more Event.Events field names
    Example: Node
  • Event Watcher Policy Name
    Example: Login Failure x3
  • How often, in seconds, should this policy be checked
    Example: 900
  • Event Watcher PolicyStatusID
    Example: 0
  • Field from Event.Events DB table to use in threshold calculation. Value must be a field in Events. The Threshold condition is formulated as 'if ($PolicyThresholdMetric($PolicyThresholdField) $PolicyThresholdOperatorID $PolicyThresholdValue)'
    Example: Count
  • SQL Function applied to $PolicyThresholdField and compared with the $PolicyThresholdOperatorID operator against $PolicyThresholdValue The Threshold condition is formulated as 'if ($PolicyThresholdMetric($PolicyThresholdField) $PolicyThresholdOperatorID $PolicyThresholdValue)' Allowed Values: - count - sum - max - min - avg
    Example: sum
  • The OperatorID of the threshold calculation The Threshold condition is formulated as 'if ($PolicyThresholdMetric($PolicyThresholdField) $PolicyThresholdOperatorID $PolicyThresholdValue)' Allowed Values: - 0 => = - 1 => > - 2 => >= - 3 => < - 4 => <= 5 -> !=
    Example: 2
  • The numeric value used in the threshold condition. The Threshold condition is formulated as 'if ($PolicyThresholdMetric($PolicyThresholdField) $PolicyThresholdOperatorID $PolicyThresholdValue)'
    Example: 3
  • Indicates which type of search - field => Guided - sql => Manual SQL
    Example: sql
Back to Top

Response

Supported Media Types

200 Response

Successful operation
Body ()
Root Schema : schema
Match All
Show Source
Nested Schema : SuccessfulUpdateOperation
Type: object
Show Source
Nested Schema : type
Type: object
Show Source
Nested Schema : data
Type: array
The properties of the updated event watcher policy.
Show Source
Nested Schema : eventWatcherPoliciesRead
Type: object
Show Source
  • Indicates which type of action to take when a threshold is crossed. - event => Meta Event - notification => Notification profile
    Example: event
  • Comma-separated list of notification recipients.
    Example:
  • Filters
    List of Filters with the Watcher
  • ID of the notification profile.
    Example: 0
  • Notification Profile Name
    Example: oracle.doceng.json.BetterJsonNull@7053a864
  • ID of the notification template.
    Example: 0
  • Notification Template Name
    Example: oracle.doceng.json.BetterJsonNull@85104d6
  • Action associated with the Policy
    Example: Meta Event: Login Failure x3
  • Policy Author
    Example: Administrator
  • Event Watcher Policy Description
    Example: For any Login Failures by Node in the last 15 mins If any login failures occur and the Sum of Count >= 3, create this event.
  • The ID of the Meta Event that should be dispatched if the threshold condition is met for the filtered metrics
    Example: 3
  • The Name of the Meta Event that should be dispatched if the threshold condition is met for the filtered metrics
    Example: Login Failure x3
  • SQL used to select which events will be processed by this CAPE Policy's node(s)
    Example: (EventType = 'LoginLogout' AND Severity > 1 AND LastReported > (UNIX_TIMESTAMP() - 900))
  • A SQL "GROUP BY" clause that allows the filtered metrics to be grouped. Valid format is empty or a comma-delimited list of one or more Event.Events field names
    Example: Node
  • Policy ID specified for individual CRUD operations
    Example: 2
  • Event Watcher Policy Name
    Example: Login Failure x3
  • How often, in seconds, should this policy be checked
    Example: 900
  • Event Watcher Policy Status
    Example: Disabled
  • Event Watcher Policy Status Icon
    Example: OrbRed.png
  • Event Watcher PolicyStatusID
    Example: 0
  • Overall threshold operation
    Example: sum(Count) >= 3
  • Field from Event.Events DB table to use in threshold calculation. Value must be a field in Events. The Threshold condition is formulated as 'if ($PolicyThresholdMetric($PolicyThresholdField) $PolicyThresholdOperatorID $PolicyThresholdValue)'
    Example: Count
  • SQL Function applied to $PolicyThresholdField and compared with the $PolicyThresholdOperatorID operator against $PolicyThresholdValue The Threshold condition is formulated as 'if ($PolicyThresholdMetric($PolicyThresholdField) $PolicyThresholdOperatorID $PolicyThresholdValue)' Allowed Values: - count - sum - max - min - avg
    Example: sum
  • The OperatorID of the threshold calculation The Threshold condition is formulated as 'if ($PolicyThresholdMetric($PolicyThresholdField) $PolicyThresholdOperatorID $PolicyThresholdValue)' Allowed Values: - 0 => = - 1 => > - 2 => >= - 3 => < - 4 => <= 5 -> !=
    Example: 2
  • The numeric value used in the threshold condition. The Threshold condition is formulated as 'if ($PolicyThresholdMetric($PolicyThresholdField) $PolicyThresholdOperatorID $PolicyThresholdValue)'
    Example: 3
  • Indicates which type of search - field => Guided - sql => Manual SQL
    Example: sql
Nested Schema : Filters
Type: array
List of Filters with the Watcher
Show Source
Example:
[
    {
        "FieldName":"Ack",
        "Expression":"0",
        "FieldValue":""
    },
    {
        "FieldName":"Action",
        "Expression":"0",
        "FieldValue":""
    },
    {
        "FieldName":"Actor",
        "Expression":"0",
        "FieldValue":""
    }
]
Nested Schema : items
Type: object
Show Source

Default Response

Failed operation
Body ()
Root Schema : schema
Type: object
Show Source
Nested Schema : errors
Type: array
The list of errors reported. Validation errors will be keyed by record field.
Show Source
Nested Schema : items
Type: object
Back to Top