Event Records Structure

Owned by Former user (Deleted)
Mar 03, 2015
2 min read

Overview

Event records are comprised of an event header and an event body:

  • Event header is comprised of a fixed number of fields, regardless of the event type.
  • Event body content varies based on the event type.

Event data generated by a Universal Agent component is related either to the component itself or to another component or object. The event header distinguishes between these two cases within the reporter fields and source fields.

  • Reporter fields identify the component reporting the event.
  • Source fields identify the component or object that is the topic of the event.

If the reporter and the source are the same entity, the reporter fields are empty.

Event Types

There are a number of different types of events (event records) created by UES. New types of events may be added with new releases or product maintenance.

Each type of event is identified by the eventType field in an Event Header.

Event Data

Each event record consists of multiple fields. The data in the fields has different formats and characteristics.

Data Formats

Field Format

Description

String

Text value consisting of any printable character. Depending on the value there may or may not be any restrictions on its length.

Signed integer

Signed integer value ranging from -2,147,483,646 to 2,147,483,647.

Unsigned integer

Unsigned integer value ranging from 0 to 4,294,967,295.

Boolean

True or false (or yes or no) value, where:

  • 1 represents true or yes.
  • 0 represents false or no.

UUID

Universally Unique Identifier that is a 128-bit value that is represented externally as a string value according to ISO/IEC 11578:1996.

Date and time

All date and time values are represented as Coordinated Universal Time (UTC).

Data Characteristics

Field Format

Description

Case dependent

String value that may be case sensitive depending on the originating O/S or file system.

Optional

Some fields may not contain any value if not applicable or not provided by the source of the event.