opEvents processes syslog, SNMP Traps, NMIS Events into a common format for further processing. This process is called normalisation. The following table represents all the current properties of the normalised events.
Event Property | Description | Example |
eventid (_id) | A globally unique Event ID | |
time and time_tag | Unix EPOCH of the event | |
date | The human readable date | |
node | The NMIS node name | |
host | The IP address or hostname | |
event | Name of the event | Node Down, Node Up |
element | What is the element of the node | FastEthernet1, Neighbor 1.2.4.5 |
state | Is the state true or false | up/down, open/closed, etc |
stateful | Stateful object name | Node, Interface, OSPF Neighbor |
details | Other event details | |
type | syslog, trap, NMIS | |
action | What action policy is associated to this event. | |
escalate | What escalation policy is associated to this event. | |
acknowledged | Has the event been acknowledged | |
flap | Is this event a flap? | True or false |