Table A-1 Fields in the alerts.status Table
Field
|
Type
|
Size
|
Mandatory?
|
Description
|
Identifier
|
varchar
|
255
|
Yes
|
Controls Cisco Info Server deduplication. The row identifier is described in Creating a Unique Identifier.
|
Serial
|
incr
|
-
|
Yes
|
The Cisco Info Center serial number for the row.
|
Node
|
varchar
|
64
|
Yes
|
Identifies the managed entity from which the alarm originated. This could be a host or device name, service name, or other entity. For IP network devices or hosts the Node field contains the resolved name of the device or host. In cases where the name cannot be resolved, the Node field should contain the IP address of the host or device.
|
NodeAlias
|
varchar
|
64
|
No
|
The alias for the node. For network devices or hosts this should be the logical (Layer-3) address of the entity. For IP devices or hosts this should be the IP address.
|
Manager
|
varchar
|
64
|
Yes
|
The descriptive name of the Cisco Info Mediator that collected and forwarded the alarm to the Cisco Info Server. This can also be used to indicate the host on which the Cisco Info Mediator is running.
|
Agent
|
varchar
|
64
|
No
|
The descriptive name of the sub-manager that generated the alert.
|
AlertGroup
|
varchar
|
64
|
No
|
The descriptive name of the type of failure indicated by the alert (for example, Interface Status or CPU Utilization).
|
AlertKey
|
varchar
|
255
|
Yes
|
The descriptive key indicating the managed object instance referenced by the alert (for example, the disk partition indicated by a "file system full" alert or the switch port indicated by a utilization alert).
|
Severity
|
int
|
-
|
Yes
|
Indicates the alert severity level, which provides an indication of how the perceived capability of the managed object has been affected. The color of the alert in the Event List is controlled by the severity value:
0 = Clear
1 = Indeterminate
2 = Warning
3 = Minor
4 = Major
5 = Critical.
|
Summary
|
varchar
|
255
|
Yes
|
The text summary of the cause of the alert.
|
StateChange
|
optime
|
-
|
Yes
|
An automatically maintained Cisco Info Server timestamp of the last insert or update of the alert from any source.
|
FirstOccurrence
|
time
|
-
|
Yes
|
The time in seconds (from midnight (GMT), Jan 1, 1970) when this alert was created or when polling started at the Cisco Info Mediator.
|
LastOccurrence
|
ltime
|
-
|
Yes
|
The time when this alert was last updated at the Cisco Info Mediator.
|
InternalLast
|
timestamp
|
-
|
Yes
|
The time when this alert was last updated at the Cisco Info Server.
|
Poll
|
int
|
-
|
No
|
The frequency of polling for this alert in seconds.
|
Type
|
int
|
-
|
No
|
The type of alert:
0 = Type not set
1 = Problem
2 = Resolution
3 = Visionary problem
4 = Visionary resolution
7 = ISMs new alarm
8 = ISMs old alarm
11 = More Severe
12 = Less Severe
13 = Information.
|
Tally
|
opcount
|
-
|
Yes
|
Automatically maintained count of the number of inserts and updates of the alert from any source. This count is affected by deduplication, described in Introduction to Deduplication.
|
Class
|
int
|
-
|
Yes
|
The alert class used to identify the Cisco Info Mediator or vendor from which the alert was generated. Controls the applicability of context-sensitive Event List tools.
|
Grade
|
int
|
-
|
No
|
Indicates the state of escalation for the alert:
0 = Not Escalated
1 = Escalated.
|
Location
|
varchar
|
64
|
No
|
Contains information indicating the physical location of the device, host, or service for which the alert was generated.
|
OwnerUID
|
int
|
8
|
Yes
|
The user identifier of the user who is assigned to handle this alert.
|
OwnerGID
|
int
|
8
|
No
|
The group identifier of the group assigned to handle this alert.
|
Acknowledged
|
int
|
8
|
Yes
|
Indicates whether the alert has been acknowledged:
0 = No
1 = Yes
Alerts can be acknowledged manually by a network operator or automatically by a correlation or workflow process.
|
Flash
|
int
|
-
|
No
|
Enables the option to make the Event List flash.
|
EventID
|
varchar
|
64
|
No
|
The event ID (for example, SNMPTRAP-link down). Multiple events can have the same event ID. This is populated by the Cisco Info Mediator rules file and used by Precision.
|
ExpireTime
|
int
|
-
|
Yes
|
The number of seconds until the alert is cleared automatically. Used by the Expire automation.
|
ProcessReq
|
int
|
-
|
No
|
Indicates whether the alert should be processed by Precision. This is populated by the Cisco Info Mediator rules file and used by Precision.
|
SuppressEscl
|
int
|
-
|
Yes
|
Contains information used to suppress or escalate the alert:
0 = Normal
1 = Escalated
2 = Escalated-Level 2
3 = Escalated-Level 3
4 = Suppressed
5 = Hidden
6 = Maintenance.
The suppression level is manually selected by operators from the Event List.
|
Service
|
varchar
|
64
|
No
|
Contains the name of the service affected by this alert.
|
PhysicalSlot
|
int
|
-
|
No
|
The slot number indicated by the alert.
|
PhysicalPort
|
int
|
-
|
No
|
The port number indicated by the alert.
|
PhysicalCard
|
varchar
|
64
|
No
|
The card name or description indicated by the alert.
|
TaskList
|
int
|
-
|
Yes
|
Indicates whether a user has added the alert to the Task List:
0 = No
1 = Yes
Operators can add alerts to the Task List from the Event List.
|
NmosSerial
|
varchar
|
64
|
No
|
The serial number of a suppressed alert. Populated by Precision.
|
NmosObjInst
|
int
|
-
|
No
|
Populated by Precision during alert processing.
|
NmosCauseType
|
int
|
-
|
No
|
The alert state, populated by Precision as an integer value:
0 = Unknown
1 = Root cause
2 = Symptom.
|
LocalNodeAlias
|
varchar
|
64
|
Yes
|
Contains the alias of the network entity indicated by the alert. For network devices or hosts, this is the logical (layer-3) address of the entity, or another logical address that enables direct communication with the device. For use in managed object instance identification.
|
LocalPriObj
|
varchar
|
255
|
No
|
The primary object referenced by the alert. For use in managed object instance identification.
|
LocalSecObj
|
varchar
|
255
|
No
|
The secondary object referenced by the alert. For use in managed object instance identification.
|
LocalRootObj
|
varchar
|
255
|
Yes
|
An object equivalent to the primary object referenced in the alarm. For use in managed object instance identification.
|
RemoteNodeAlias
|
varchar
|
64
|
Yes
|
The network address of the remote network entity. For use in managed object instance identification.
|
RemotePriObj
|
varchar
|
255
|
No
|
The primary object of a remote network entity referenced by an alarm. For use in managed object instance identification.
|
RemoteSecObj
|
varchar
|
255
|
No
|
The secondary object of a remote network entity referenced by an alarm. For use in managed object instance identification.
|
RemoteRootObj
|
varchar
|
255
|
Yes
|
An object equivalent to the remote entity's primary object referenced in the alarm. For use in managed object instance identification.
|
X733EventType
|
int
|
-
|
No
|
Indicates the alert type. This can be any of the following:
0 = Not defined
1 = Communications
2 = Quality-of-Service
3 = Processing error
4 = Equipment
5 = Environmental
6 = Integrity violation
7 = Operational violation
8 = Physical violation
9 = Security service violation
10 = Time domain violation.
|
X733ProbableCause
|
int
|
-
|
No
|
Indicates the probable cause of the alert.
|
X733SpecificProb
|
varchar
|
64
|
No
|
Identifies additional information for the probable cause of the alert. Used by Cisco Info Mediator rules files to specify a set of identifiers for use in managed object instance identification.
|
X733CorrNotif
|
varchar
|
255
|
No
|
Contains a listing of all notifications with which this notification is correlated.
|
ServerName
|
varchar
|
64
|
Yes
|
The name of the originating Cisco Info Server. Used by gateways to control propagation of alerts between Cisco Info Servers.
|
ServerSerial
|
int
|
8
|
Yes
|
The serial number of the alert on the originating Cisco Info Server (if it did not originate on this Cisco Info Server). Used by gateways to control the propagation of alerts between Cisco Info Servers.
|
MasterSerial
|
int
|
|
|
Identifies the Master Cisco Info Server if this alert is being processed in a dual server Desktop environment.
Note MasterSerial must be the last field in the alerts.status table if you are using a dual Desktop environment.
|
NEName
|
varchar
|
64
|
|
The name of the network element generating the event.
|
ObjectType
|
char
|
64
|
Yes
|
NE
Card
Connection
Endpoint
Endpoint.FR
Endpoint.ATM
Endpoint.CE
Endpoint.VOICE
Line.access
Line.trunk
Peripheral
Peripheral.dc
Peripheral.disk
Peripheral.fan
Peripheral.ps
Peripheral.ts
Port
Port.ATM
Port.FR
Port.VOICE
System
System.config
System.connectivity
System.general
System.nic
System.redundancy
System.test
|
ObjectStatus
|
int
|
|
No
|
The current status of the object reporting the event (for example, "Downed", "Added", "Inserted" etc.)
Events cleared by Automation containing "Cleared" in the ObjectStatus.
|
SubObjectType
|
char
|
64
|
No
|
Used to further identify the object. The value in this field depends upon the ObjectType. This field is not mandatory and may be blank in some cases.
|
NEAddress
|
char
|
32
|
Yes
|
IP address of the network element used by the CWM machine to access the network element.
|
NEType
|
int
|
|
Yes
|
0,100 - IPX
1,101 - BPX 8600
2,102 - IGX 8400
3,103 - MGX 8220
4,104 - DAS
5,105 - VNS
6,106 - DASD
12,112 - ESP
999 Unknown
1000 Info Center Mediator.
|
Slot
|
char
|
4
|
No
|
Slot number of the network element reporting the event.
|
PSAP
|
char
|
6
|
No
|
Physical Service Access Point. The PSAP is a hierarchical identifier for the resource over which virtual circuits are provisioned. The word "Physical" refers to the OSI layer, thus, a PSAP identifies the Layer 1 facility.
This hierarchical structure follows the following convention: <physical_line>.<sub_channel1>.<sub_channel2>...<sub_channeln>.
For single port cards, physical line number is always 1.
For multi-port cards, physical line number starts at 1.
|
DSAP
|
char
|
24
|
No
|
Data-link Service Access Point.
This field contains the Virtual Circuit Identifier (VCI). The syntax is <DSAP> (<annotation>), with a space delimiting the DSAP from the annotation, and the annotation appearing in parentheses. This SAP is used between OSI Layer 3 and Layer 2 to identify virtual circuits. Depending upon the trap type and trap subtype, this field would contain:
FR: DSAP = <DLCI> (DLCI)
ATM: DSAP = <VPI>[.<VCI>] (VPI/VCI)
|
LSAP
|
char
|
6
|
No
|
Logical Service Access Point. For naming consistency, the concept of logical port numbering at the card level was introduced. For cards such as UFM, FRSM, and AUSM, a logical identifier for the port is created when the port is provisioned. It can essentially be thought of as a random number, as it has no inherent physical information contained within it. These identifiers are stored in the LSAP field. For IMA, it is this number which remains constant, even when lines are added and deleted from the port.
For virtual trunks, the LSAP contains the user assigned Trunk ID.
|
RemoteNEName
|
char
|
64
|
No
|
This field contains the remote network element name for connection and trunk events.
|
RemoteSlot
|
char
|
4
|
No
|
This field contains the slot number for the remote network element name for connection and trunk events.
|
RemotePSAP
|
char
|
36
|
No
|
This field contains the PSAP for the remote network element name for connection and trunk events.
|
RemoteLSAP
|
char
|
6
|
No
|
This field contains the LSAP for the remote network element name for connection and trunk events.
|
RemoteDSAP
|
char
|
24
|
No
|
This field contains the DSAP for the remote network element name for connection events.
|
TrapReason
|
char
|
64
|
No
|
This field contains the trap reason code as specified in the MIB for BPX 8600 and IGX 8400. For MGX 8220, VNS, and ESP, trap reason is populated by the trap number itself, as each trap is associated with a specific event. This allows filtering on a range of traps, based upon trap identifiers.
|
AdminDomain
|
char
|
64
|
No
|
The administrative domain for the alert.
|
BitMapField
|
char
|
36
|
No
|
This field contains the BitMap from one of the SNMP VarBinds received by the Mediators.The Deocode BitMap tool uses the information within this field, along with the Convert field, to display the decoded values.
|
Convert
|
char
|
64
|
No
|
Field used by the BitMap Decode tool to define the conversion values for the BitMap held in the above field.
|
AdditionalInfo
|
char
|
255
|
No
|
This field contains values for all SNMP VarBinds received in the traps that don't fall into one of the other fields.
|
Customer
|
varchar
|
64
|
No
|
Contains the name of the customer affected by this alert.
|
Customer
|
char
|
64
|
No
|
This field is currently not used. It can be populated with the customer name by the Service Provider.
|
Site
|
char
|
64
|
No
|
Physical location field. This is specified by the Service Provider.
|
ServiceIdentifier
|
char
|
64
|
No
|
This field is currently not used and can be used by the Service Provider.
|
ServiceType
|
char
|
24
|
No
|
This field is used by the Real Time Counter tool to determine the counters. See the Cisco Info Center Administrator Reference for more information.
|
NEFWVersion
|
char
|
10
|
No
|
The firmware version of the network element. This field is used to determine whether to run the Cisco Equipment Manager or CiscoView 4.11 for that network element.
|
NEModelID
|
char
|
12
|
No
|
Model ID of the network element. (This field is for release 9.2)
|
NetworkName
|
char
|
16
|
No
|
Network name of the CWM network to which the network element is attached.
|
LNNI
|
int
|
|
No
|
Local-end NNI (Network-to-Network Interface).
|
RNNI
|
int
|
|
No
|
Remote-end NNI.
|
SVVersion
|
char
|
8
|
No
|
Version of the CWM software (for example, 8.4 or 9.1).
|
MPLSType
|
int
|
|
No
|
This field is used for alerts that have been processed by the Policy Manager component to indicate the type of MPLS event represented by the alert.
|