The following table describes the fields in an event header.
Field Name |
Description |
---|---|
eventCategory |
Category of the event: This category list is ordered by priority, from highest to lowest. |
eventSeverity |
Severity of the event with respect to the reporting component: This severity list is ordered by priority, from highest to lowest. |
eventTopic |
Type of object to which the event pertains. Event topic values are:
|
eventType |
Three-digit number that uniquely identifies the event class. Events of the same type represent a specific class of events. |
eventUuid |
Universally Unique Identifier of each event message generated on any system at any time. |
recordedTime |
UTC date and time that the event was recorded by the local Broker. |
recordedTimeUsec |
Microsecond portion of the TIME value. |
reporterGroupUuid |
Universally unique identifier of the work group of which the reporter is a member. If the reporterGroupUuid and the reporterObjectUuid are the same, the component is the work group leader. |
reporterIpAddr |
Host name of the component that generated the event. This is the host name as reported by the operating system, typically using the gethostname() function. |
reporterName |
Name of the component that generated the event:
|
reporterObjectUuid |
Universally unique identifier of the object identified as the reporter of the event. |
reporterParentUuid |
Universally unique identifier of the parent component of the process that reported the event. |
reporterSysId |
Installation system identifier of the component that generated the event. The system identifier identifies a specific Universal Agent installation on a host system. |
reporterUnitUuid |
Universally unique identifier of the work unit of which the reporter is a member. If the reporterUnitUuid and the reporterObjectUuid are the same value, the component is the unit leader. |
sourceGroupUuid |
Universally unique identifier of the work group of which the source is a member. If the sourceGroupUuid and the sourceObjectUuid are the same, the component is the work group leader. |
sourceIpAddr |
Host name of the component that generated the event. This is the host name as reported by the operating system, typically using the gethostname() function. |
sourceName |
Name of the component that generated the event. Valid names include:
|
sourceObjectUuid |
Universally unique Identifier of the object identified as the source of the event. The type of object is represented by the eventTopic. |
sourceParentUuid |
Universally unique identifier of the parent component of the process that generated the event. |
sourceSysId |
Installation system identifier of the component that generated the event. The system identifier identifies a specific Universal Agent installation on a host system. |
sourceUnitUuid |
Universally unique identifier of the work unit of which the source is a member. If the sourceUnitUuid and the sourceObjectUuid are the same value, the component is the unit leader. |
timeZone |
Time zone in which the event was generated. The value is the number of seconds between UTC and local time. |
version |
Numeric value that is incremented whenever the header changes (that is, changes to the header format or header fields). |