Where does event data come from?
What is an event?
An event tells you that something has changed or happened in your managed network. They are generated from a number of different inputs, such as polled information, SNMP Traps, and Syslog messages.
- For example, if a certain port utilization exceeds its predetermined threshold, ENA will raise a Port Utilization High Event.
Every event has a severity level. You are able to configure severity levels for each event. Incidents inherit the highest severity level from the currently raised event.
- For example, if an event has a severity level of Major, then the incident that it raises will have a severity level of Major. If that incident is then updated by an event with a severity level of Critical, that incident then inherits the Critical severity level.
Event severity levels are as follows:
| Display Severity and Color | Description |
|---|---|
 Green |
Information or Cleared |
 Yellow |
Minor |
 Amber |
Major |
 Orange |
Severe |
 Red |
Critical |
Where does event data come from?
ENA event data can originate from:
- polled data from managed objects.
- regular SNMP polling of managed devices.
- availability monitoring using traceroute to detect managed object availability and latency performance.
- ENA Cisco IOS IP SLA identifies performance of routing devices by using IP SLA operations. ENA polls the operations, against the results of which ENA can raise events.
- SNMP trap data.
- device logging data (syslog).
- event data received from integrated third party software.
Whatever the polling method, how ENA raises events against the polled data depends on whether the event is a threshold or non-threshold event:
- threshold events are evaluated against a set threshold, for example a Device Utilization High Event is only raised when device utilization exceeds the set threshold. By default, the majority of events, and all of those associated with modules, are deactivated. Threshold events are activated through Threshold Settings.
- non-threshold events may identify state change, for example Module Ok to Module Minor Fault, or changes in inventory status, for example Port Duplex Change.
Event dashboard and dashlet
Please see the following articles for help and information on the system dashboards and dashlets relating to events. You can also create your own custom dashboard and add to it the Events List dashlet as you wish.
Comments
0 comments
Please sign in to leave a comment.