Representing Events
An event is a time-specific change to a resource or class. Fault Manager and SMF services dynamically record event data. A device faulting is a system event. An administrative change to a service is a system event.
The following SSID identifies any system fault event:
//:class.event//:event.fault
The following SSID identifies a fault of CPU 0:
//:class.cpu//:res.id/0//:event.fault
The following SSID identifies any administrative action event:
//:class.event//:event.adm-action
The following SSID identifies an administrative action on the svc:/network/smtp:sendmail
service:
//:class.svc//:res.fmri/network/smtp:sendmail//:event.adm-action
The statistics store can capture system fault, defect, and alert data as described in Fault Management Overview in Managing Faults, Defects, and Alerts in Oracle Solaris 11.4 and some administrative action data. The following example lists all events for CPUs:
$ sstore list //:class.cpu//:res.id/0//:event.*
IDENTIFIER
//:class.cpu//:res.id/0//:event.adm-action
//:class.cpu//:res.id/0//:event.fault
Event information is stored only if you requested the information. The statistics store is not populated with events that existed before event recording started. See the sstore capture
command in Using Command Line Interfaces.
The statistics store includes a predefined set of formatting operations for events. Use the fmt
keyword in the event SSID to format event information as shown in Formatting Event Information.
In some system object classes, events can be used as aliases to the resources with which they are associated.