Cisco Info Server Fields

This appendix lists the data types and fields for the Cisco Info Server.

Data Types Within the Cisco Info Server

Table C-1 describes the data types available within the Cisco Info Server.

Data type	Description
char	A string of characters, maximum size is defined by the field size.
int	An integer value.
time	Time and date as a value in seconds since Midnight, Jan 1st 1970.
ltime	Time and date as above, but automatically maintained for last occurrence fields.
timestamp	Time and date as above, but automatically filled in by the Cisco Info Server when the record is created.
incr	An integer field which is automatically filled with a Cisco Info Server internal variable when the record is inserted. Used for unique serial number generation.
optime	A time field which is automatically updated with current date and time whenever an insert or update is done.
opcount	An integer field which is incremented whenever a record is inserted or an attempt is made to insert a record which already exists.

Table C-1:

Data type Description

char

A string of characters, maximum size is defined by the field size.

int

An integer value.

time

Time and date as a value in seconds since Midnight, Jan 1st 1970.

ltime

Time and date as above, but automatically maintained for last occurrence fields.

timestamp

Time and date as above, but automatically filled in by the Cisco Info Server when the record is created.

incr

An integer field which is automatically filled with a Cisco Info Server internal variable when the record is inserted. Used for unique serial number generation.

optime

A time field which is automatically updated with current date and time whenever an insert or update is done.

opcount

An integer field which is incremented whenever a record is inserted or an attempt is made to insert a record which already exists.

Data Types Within the Cisco Info Server

The alerts.status Table

The alerts.status table is the storage point for all events and correlations of those events. Table C-1 shows the alerts.status table's default fields in the Cisco Info Server.

Table C-2: Data Types Within the alerts.status Table
Field Name Field Type Field Size Mandatory Description

Identifier

char

255

Yes

Internal hash key/table identifier.

Serial

incr

Yes

Cisco Info Center serial number for item.

Node

char

64

Yes

Host or IP address or other name identifying where the alert originated.

NodeAlias

char

64

No

Alias for node (that is, for hosts which have multiple IP addresses).

Manager

char

64

Yes

Descriptive name of the Manager that generated the alert.

Agent

char

64

No

Descriptive name of the sub Manager that generated the alert.

AlertGroup

char

64

No

Descriptive name of the group within the Manager that generated the alert.

AlertKey

char

64

Yes

Descriptive key with reference to the alert (for example, disk partition where threshold exceeded or particular port on a hub).

Severity

int

Yes

Severity of problem:
0 Clear, 1 Indeterminate, 2 Warning,
3 Minor, 4 Major, 5 Critical

Summary

char

255

Yes

Summary of alert/problem as human readable text to appear on the administration console.

StateChange

optime

Yes

Automatically maintained timestamp at the Cisco Info Server of last insert/update of alert from any source.

FirstOccurrence

time

Yes

Time (in seconds from Jan. 1, 1970) when this alert was created or when polling started at Info Mediator.

LastOccurrence

ltime

Yes

Time when this alert was last updated at Info Mediator.

InternalLast

timestamp

Yes

Time when this alert was updated at the Cisco Info Server.

Poll

int

No

Frequency of polling for this alert in seconds.

Type

int

No

Type of alert (4 = Trap, 12 = polled event).

Tally

opcount

Yes

Automatically maintained count of the number of inserts/updates of the alert from any source.

Class

int

Yes

Alert class.

Grade

int

No

Grade of alert/problem within the set severity.

Location

char

64

No

Not used: reserved for location identification.

OwnerUID

int

8

Yes

User ID of the user who is assigned to handle this alert.

OwnerGID

int

8

No

Group ID of the group that is assigned to handle this alert.

Acknowledged

int

8

Yes

Has assigned user acknowledged the assignment? (0 = No, 1 = Yes)

Flash

int

No

Enables the option to make the Event List flash.

ServerName

char

64

Yes

Name of originating server. Used by Info Gateways to control propagation of alerts between Cisco Info Servers.

ServerSerial

int

8

Yes

Serial number of alert on originating server (if not originated on this server). Used by Info Gateways to control propagation of alerts between Cisco Info Servers.

**Table C-2: Data Types Within the alerts.status Table**
Field Name	Field Type	Field Size	Mandatory	Description
Identifier	char	255	Yes	Internal hash key/table identifier.
Serial	incr		Yes	Cisco Info Center serial number for item.
Node	char	64	Yes	Host or IP address or other name identifying where the alert originated.
NodeAlias	char	64	No	Alias for node (that is, for hosts which have multiple IP addresses).
Manager	char	64	Yes	Descriptive name of the Manager that generated the alert.
Agent	char	64	No	Descriptive name of the sub Manager that generated the alert.
AlertGroup	char	64	No	Descriptive name of the group within the Manager that generated the alert.
AlertKey	char	64	Yes	Descriptive key with reference to the alert (for example, disk partition where threshold exceeded or particular port on a hub).
Severity	int		Yes	Severity of problem: 0 Clear, 1 Indeterminate, 2 Warning, 3 Minor, 4 Major, 5 Critical
Summary	char	255	Yes	Summary of alert/problem as human readable text to appear on the administration console.
StateChange	optime		Yes	Automatically maintained timestamp at the Cisco Info Server of last insert/update of alert from any source.
FirstOccurrence	time		Yes	Time (in seconds from Jan. 1, 1970) when this alert was created or when polling started at Info Mediator.
LastOccurrence	ltime		Yes	Time when this alert was last updated at Info Mediator.
InternalLast	timestamp		Yes	Time when this alert was updated at the Cisco Info Server.
Poll	int		No	Frequency of polling for this alert in seconds.
Type	int		No	Type of alert (4 = Trap, 12 = polled event).
Tally	opcount		Yes	Automatically maintained count of the number of inserts/updates of the alert from any source.
Class	int		Yes	Alert class.
Grade	int		No	Grade of alert/problem within the set severity.
Location	char	64	No	Not used: reserved for location identification.
OwnerUID	int	8	Yes	User ID of the user who is assigned to handle this alert.
OwnerGID	int	8	No	Group ID of the group that is assigned to handle this alert.
Acknowledged	int	8	Yes	Has assigned user acknowledged the assignment? (0 = No, 1 = Yes)
Flash	int		No	Enables the option to make the Event List flash.
ServerName	char	64	Yes	Name of originating server. Used by Info Gateways to control propagation of alerts between Cisco Info Servers.
ServerSerial	int	8	Yes	Serial number of alert on originating server (if not originated on this server). Used by Info Gateways to control propagation of alerts between Cisco Info Servers.

Generic Fields

Before execution of the rules file, Info Mediator initializes and sets some alert fields as specified in Table C-2. Info Mediator can override these values.

Table C-3: Cisco Info Server Generic Field Settings
Field Set To:

Identifier

Null string

Serial

0

Node

Null string

NodeAlias

Null string

Manager

Value of the Manager property.

Agent

Null string

AlertGroup

Null string

AlertKey

0

Severity

0

Summary

Null string

StateChange

0

FirstOccurrence

Current time at the creation of the alert.

LastOccurrence

Current time at the creation of the alert.

InternalLast

0

Poll

0

Type

0

Tally

0

Class

0

Grade

0

Location

Null string

OwnerUID

65534 (nobody)

Acknowledged

0

ServerName

Name of server the Info Mediator is connected to (for example, NCOMS).

ServerSerial

0

OwnerGID

0 (public)

Flash

0

Field	Set To:
Identifier	Null string
Serial	0
Node	Null string
NodeAlias	Null string
Manager	Value of the Manager property.
Agent	Null string
AlertGroup	Null string
AlertKey	0
Severity	0
Summary	Null string
StateChange	0
FirstOccurrence	Current time at the creation of the alert.
LastOccurrence	Current time at the creation of the alert.
InternalLast	0
Poll	0
Type	0
Tally	0
Class	0
Grade	0
Location	Null string
OwnerUID	65534 (nobody)
Acknowledged	0
ServerName	Name of server the Info Mediator is connected to (for example, NCOMS).
ServerSerial	0
OwnerGID	0 (public)
Flash	0

Table of Contents