Event Records Structure
- Former user (Deleted)
Overview
Event records are comprised of an event header and an event body:
- Event header is comprised of a fixed number of fields, regardless of the event type.
- Event body content varies based on the event type.
Event data generated by a Universal Agent component is related either to the component itself or to another component or object. The event header distinguishes between these two cases within the reporter fields and source fields.
- Reporter fields identify the component reporting the event.
- Source fields identify the component or object that is the topic of the event.
If the reporter and the source are the same entity, the reporter fields are empty.
Event Types
There are a number of different types of events (event records) created by UES. New types of events may be added with new releases or product maintenance.
Each type of event is identified by the eventType field in an Event Header.
Event Data
Each event record consists of multiple fields. The data in the fields has different formats and characteristics.
Data Formats
Field Format |
Description |
|---|---|
String |
Text value consisting of any printable character. Depending on the value there may or may not be any restrictions on its length. |
Signed integer |
Signed integer value ranging from -2,147,483,646 to 2,147,483,647. |
Unsigned integer |
Unsigned integer value ranging from 0 to 4,294,967,295. |
Boolean |
True or false (or yes or no) value, where:
|
UUID |
Universally Unique Identifier that is a 128-bit value that is represented externally as a string value according to ISO/IEC 11578:1996. |
Date and time |
All date and time values are represented as Coordinated Universal Time (UTC). |
Data Characteristics
Field Format |
Description |
|---|---|
Case dependent |
String value that may be case sensitive depending on the originating O/S or file system. |
Optional |
Some fields may not contain any value if not applicable or not provided by the source of the event. |