Previous Next
PATROL Groups > Objects > Monitor Event

Monitor Event
The Monitor Event object will watch a PATROL agent and trigger a Policy when an event is created or its status is updated.
How it is used
The Monitor Event object can be used to monitor for new or changed events and trigger Policies in response.
Configuration
To configure the Monitor Event object you need to know the name of the managed system that you want to monitor, and the filter criteria for the events that you want to monitor.
Details tab
 
Managed system
Type the name of the managed system where the events are located, or click the ellipsis button (...) and browse for them. When you click the ellipsis button, a pop-up window appears. Select each managed system that you want to monitor events for. To select all managed systems, type * (asterisk) in the Managed system field.
Filters
The list displays all filters that you have created to search for events on the managed system. To remove or edit a filter, select it and click Remove or Edit respectively. To add a filter, see the instructions below.
To add a filter:
1.
Click Add. The Add Filter dialog appears.
2.
From the Field drop-down list, select the field that you want to filter against.
3.
From the Relation drop-down list, select the relation that you want to use to compare the value of the field with the value that you enter.
4.
In the Value field, specify the value that will be compared against the value of the field.
Note: The matches pattern relation in the Integration Pack works the same way as the Filter Editor in the BMC PATROL console.
Available Published Data
 
Name
Description
Event identifier
The ID of the event assigned by the PATROL agent.
Managed system
The name of the managed system where the event was created. The managed system is a combination of the computer name and the port delimited with an underscore (_).
Computer name
The name of the computer where the managed system is located.
Port
The name of the port that is used to communicate with the managed system.
User name
The user name used to log into the managed system.
Catalog name
The name of the catalog that this event belongs to.
Class name
The name of the event class.
Event origin
The name of the monitored object that caused the event.
Application class name
The name of the application class that created this event. This value will only be valid if the event originated from an application instance or parameter.
Application instance name
The name of the application instance that created this event. This value will only be valid if the event originated from an application instance or parameter.
Event severity
The severity of the event.
Event timestamp
The date and time when this event was created.
Status description
The full text of the current status of this event. The possible values are OPEN, ACKNOWLEDGED, CLOSED, ESCALATED, DELETED.
Status value
The current status of the event. The possible values are 1, 2, 3, 4, or 5 and correspond with the respective status descriptions above.
Type description
The description of the event type. The possible values are INFORMATION, STATE CHANGE, ERROR, WARNING, ALARM, and RESPONSE.
Event description
The description text of the event.
Type value
The numeric value of the type associated with this event. The possible values are 1, 2, 3, 4, 5, and 6. The values 1-6 correspond with the respective values of the Type description code.
Parameters list
The list of parameters entered for this event.
Life expectancy
A value describing when the event will be stored in the Event Repository. Possible values are: STORED, DEL_IF_CLOSED, DEL_IF_INFO, DO_NOT_STORE.
Source ID
The ID of the client session where the event was generated.
User identifier of event handler
The ID of the user that last modified the event diary or performed an acknowledge, close, or delete action on this event.
User identifier that owns event
The ID of the user that has been assigned as the owner of this event.
Event diary
The text of the event diary.
Events count
The number of events that were acknowledged by the Monitor Event object.
Common Published Data