|
|
The Event List allows you to view and manipulate the status of events held within the Cisco Info Server. You can display multiple filtered views of the events.
This chapter includes information about how to use the Event List and contains the following sections:
The Event List displays alerts. An alert is an event, alarm, message, or data which the Cisco Info Server receives. By default, a single alert comprises 24 fields of information held within the Cisco Info Server database.
This information on each alert is displayed according to defined filters and views. Filters select the fields from the Cisco Info Server being used to generate the Event List. Views are a way of choosing which of the filtered fields to display.
When you start an Event List, a window containing one or more Monitor boxes is displayed. The number of Monitor boxes depends on how your system administrator has configured your system. A Monitor box represents a filter and view that have been created for the Event List, and also displays statistics on the state of all alerts that match the filter.
From the Monitor box, you can display the detailed Event List windows and select an alternative view.
When an alert is received from the Cisco Info Server, by default, it is assigned to a user called nobody. You can manipulate an event that has been assigned either to the user nobody, or one that has been assigned to you. You can also manipulate an alert when it has been assigned to a Cisco Info Center group to which you belong.
Some alerts may be assigned to either the administrator or the super user. You cannot manipulate these alerts.
This section describes how to use the Event List on the UNIX platforms.
The recommended method for starting the Event List, is to click on the Event List button on the Conductor. You can also start the Event List from the command line:
host% nco_event &
When you run the Event List, the Monitor Box window is displayed. The window has three sections: the Menu bar, the Monitor box area, and the Status line. Figure 2-1 shows the Monitor Box window.
The Monitor box area displays one Monitor box. The Status line displays messages, the name of the user, and the Cisco Info Server to which it is currently connected. Between these two sections is an area in which Monitor boxes are displayed.
The following sections describe the Monitor Box window. For more information on the menus available, see Appendix A, "UNIX Desktop Reference".
To exit from the Monitor Box window, select the File menu's Exit option.
Click on the View button to display an Event List window for that filter and the currently selected view. The Option button on the right allows you to select a view for the filter. See Chapter 4, "View Builder" for more details.
The button at the top contains the name of the filter. Click on this button to start the Filter Builder, which displays the configuration of the filter and the metric value. For more information on using the Filter Builder, see Chapter 3, "Filtering Alerts".
The Number field displays the number of alerts matching the filter.
The Highest field displays the severity of the highest severity alert that matches the filter.
The Lowest field displays the severity of the lowest severity alert that matches the filter.
The Metric field's value is defined in the filter and provides summary information. It is derived from the alerts that match the filter. When you click on the Filter button, the setting of the Metric is displayed.
Below the Metric field is the Distribution Indicator. This can be displayed as either a lavalamp or a histogram. The color segments are proportional to the number of alerts at particular severity levels. For example, when half the alerts were at critical level then half the Distribution Indicator would display the color red.
Note, you can choose which information in the Monitor box to display from the Event List preferences. See Section, "Event List Preferences".
An Event List configuration is a group of Monitor boxes that are saved in a configuration file.
To open an Event List configuration file, select the File menu's Open option. A file selection window is displayed where you can select a configuration file (indicated by the file name extension .elc) to load into the Event List. The selected file name is displayed in the Title bar of the Event List.
To open a new Event List configuration file, select the File menu's New option. This clears the current Event List and sets the configuration to default.
To save the current group of Monitor boxes, select the File menu's Save option. This saves the current Event List configuration into the file it was loaded from; the file name is displayed in the Title bar of the Event List. When the Title bar displays [None] as the file name, this option operates the same as the File menu's Save As option.
To save the Event List with another file name, select the File menu's Save As option. A file selection window is displayed where you can select another directory and file name. Event List configuration files should be saved with a .elc file name extension.
The Event List automatically refreshes at intervals to display all incoming alerts. However, you can refresh the Event List between the intervals to ensure you have all of the latest alerts. To update all information in Event List windows, select the View menu's Refresh All option.
You should also note that when your system administrator makes any changes to the Cisco Info Center configuration, you need to resynchronize the Event List. To do this, select the File menu's Resync option. Your system administrator will contact you when you need to use this command.
You can freeze the Event List so updates are not displayed. Select the View menu's Freeze All option. This is a toggle button. To restart automatic updates from the Cisco Info Server, select the View menu's Freeze All option again.
To display the Event List Color window, which you can use as a guide to the severity colors, select the Windows menu's Color option. You can keep this window open for reference while you use the Event List.
To close all of the Event List windows, select the Windows menu's Close All Event Windows option.
The system administrator can define tools, for example, a ping or telnet command, to use from the Monitor Box window. To invoke these tools, use the Tools menu.
An Event List window displays alerts in a scrollable list. When alerts arrive in the Event List, they appear at the bottom of the list.
The Event List scroll area is made up of rows and columns:
The Title bar displays the names of the view and filter currently in use for this window. Figure 2-2 shows the Event List window.
The Status line displays messages about the Event List; typically displaying how many items have matched the current filter condition or have been processed by an operation, as well as, the current date and time.
To work with the Event List, you must first select an alert. Once you select an alert, you can use the facilities available from the Alerts menu. When you click on the right mouse button over the scrolled area, a popup Alerts menu is displayed. When you have not selected any alerts, none of the items on this popup menu are available.
To select a row and deselect all other rows, click on the mouse button on any alert in the Event List.
To select multiple rows, click and hold the mouse button and then drag the pointer up or down the list. To deselect an alert within a multiple selection, Control-click an alert.
To select all alerts in the Event List, select the Edit menu's Select All option. To deselect all alerts, select the Edit menu's Deselect All option.
To select all alerts that match a particular field value, Shift-click the left mouse button over the field to be matched. For example, to select all alerts where the Status field is closed, find an alert which displays the Status field as closed, move the mouse pointer over that field, then Shift-click the mouse button. All currently selected alerts are deselected.
To resize the columns in the Event List:
1. Press and hold the Shift and Control keys.
2. Click on the mouse button on a column divider.
3. Drag the mouse to change the width of the column.
The titles of the columns in the Event List are active buttons. For example, you can click on the Title button over a column to have that column sorted in ascending order. Click on the Title button over the same column to clear the sorting for that column.
To make a column a secondary sort of a first column, click on the Title button on another column after sorting the first column. For example, when you click on the Title button on Severity, and you then click on the Title button on Node, the Event List is sorted by ascending severity and ascending node names.
To set a column to be sorted in descending order, press the Shift key, then click on the Title button to select the sorting column. Any column being used in a sort is marked with a plus (+) or minus (-). Plus indicates ascending order, minus indicates descending order. The sorting is transitory and is not retained in the current view.
Your system administrator can define tools to be used on the first selected alert in the Event List. Select the Alerts menu's Tools option to display the submenu of available tools.
Your system administrator can also define other tools. To invoke these tools, use the Tools menu.
See Appendix E, "Cisco Info Center Diagnostic Tools", for more information on the available tools for Cisco Info Center.
To acknowledge an alert, select the Alerts menu's Acknowledge option. This acknowledges all selected alerts. You can acknowledge only the alerts assigned to you or to the user nobody.
The Event List automatically ignores any alerts not assigned to you. The Status line displays the number of acknowledged alerts and how many could not be acknowledged as they are not assigned to you.
To deacknowledge an alert, select the Alerts menu's Deacknowledge option. This deacknowledges all selected alerts. You can deacknowledge only the alerts assigned to you or to the user nobody.
The Event List automatically ignores any alerts not assigned to you. The Status line displays the number of deacknowledged alerts and how many could not be deacknowledged as they are not assigned to you.
Each alert in the Event List has an associated priority, which is indicated by the color in the display. For example, all critical severity alerts are red.
To change the priority for the alert, select the Alerts menu's Prioritize option. Select a priority setting from the sub-menu. You may only set the priority of alerts assigned to you or to the user nobody.
The Event List automatically ignores any alerts which are not assigned to you. The Status line displays the number of alerts that have had their priority set and how many could not be set as they are not assigned to you.
To assign an alert to another user, select the Alerts menu's User Assign option. Select a Cisco Info Center user from the sub-menu to assign all currently selected alerts to that user.
When you are a normal user, you can assign only the alerts assigned to you or to the user nobody.
To assign an alert to another group, select the Alerts menu's Group Assign option. Select a Cisco Info Center group from the submenu to assign all currently selected alerts to that group.
When an alert is assigned to another group, the alert is owned by the user nobody within that group.
To assign the alert to yourself, either select your name from the Alerts menu or select the Alerts menu's Take Ownership option.
To delete all of the currently selected alerts, select the Alerts menu's Delete option. You can only delete alerts when your permissions allow you to do so.
When you are a normal user, you can delete only the alerts assigned to you or to the user nobody.
To display a list of known resolutions, which are determined by the class of the alert, select the Alerts menu's Resolve option. When you select one of these resolutions, a pre-defined text string is appended to the journals for the alerts and the alerts are set to a Clear severity. All alerts are then deselected in the Event List.
To display additional information about an alert, double-click on an alert. This displays the Event Information window, which contains the full details of that alert. You can also see this information by selecting the Alert menu's Information option.
Use the Next and Previous buttons to move to the previous or next selected item in the Event List and to display information about that alert. Note, this may fail when the alerts have been deleted elsewhere in the system.
To copy the alert information to the Clipboard, click on the information you want to copy, then click on the right mouse button. Select the Copy to Clipboard option from the popup menu.
The Add To Journal button displays the Journal window with the currently displayed alert. See Section, "Viewing and Adding to the Journal", for more details.
To view the journal for an alert, select the Alerts menu's Journal option or click on the Add to Journal button in the Event List window. The Journal window is displayed, where you can enter a history of the alert. Figure 2-3 shows the Journal window.
The Journal window is comprised of two text areas. The top area is read only and displays the existing journal history text, complete with the time it was entered and the name of the user who entered it. The lower text area allows you to specify text to be added to the journal. Once you complete the text entry, click on the OK button to write the new text to the end of the journal, automatically time-stamping it. A limit of 4096 characters for each journal entry is allowed.
To apply journal text to all selected alerts, not just the alert whose serial number is displayed at the top of the window, click on the Apply to All Selected check box.
When you click on the OK button, the window closes. When you click on the Stay Open check box, the window does not close when you click on the OK button.
Use the Next and Previous buttons in the Journal window to move to the previous or next selected alert in the Event List window and to display the journal for that alert.
Note, you can also use the Alerts menu in this window; click on the right mouse button with the pointer over the upper text window. For more information on the Alerts menu, see Section, "Using Monitor Boxes".
To find a specific field in the Event List, select the View menu's Find option. Select a field in the current view, specify a string in the Value field, then select the type of match required. Figure 2-4 shows the Find window
The search types are displayed in the Options frame. The following list describes the search types:
When you click on the Find button, all currently selected rows are deselected when a matching row is found, and the matching row is selected. When more than one row matches your search, click on the Next button to display the next match in the Event List.
The Find window can be used as a drop site from the Event List to set up a search quickly. Click on the middle mouse button on a field in the Event List, then drag it to the list of fields in the Find window. The Options frame is set to Exact Match.
The Event List allows you to copy information from an alert to the Clipboard for use on other applications. When you select an alert, move the mouse pointer over a field. A black box surrounds the field. To copy the alert information to the Clipboard, select the Alerts menu's Copy to Clipboard option.
You can also copy alert information from the Event Information window. See Section, "Displaying Alert Information".
On each Event List, the Title bar displays the current filter and view. You can use the Filter and View options buttons to change the filter and view.
To change the filter, click on the Filter options button and select another filter. The Filter options button lists all of the available filters.
To change the view, click on the View options button and select another view. The View options button lists all the available views.
Click on the Edit buttons, next to each options button, to start the Filter Builder and View Builder. Editing filters and views is documented later in this manual. See Chapter 3, "Filtering Alerts" and Chapter 4, "View Builder".
The Jump toggle button controls how the Event List scrolls when an update occurs. When the Jump button is selected, the Event List jumps to the top of the list when an update occurs. When you click on the Jump button to deselect it, the Event List does not jump when updates occur.
To print the current view of an Event List, select the File menu's Print option. This displays the Print window. To use the Print window, select either:
Select either All Alerts In View to print all the alerts in the current Event List, or Selected Alerts to send only the currently selected alerts to the printer.
You can also control the formatting of the output using one of the following options:
|" character at the start and end of fields
Event List configuration can be used to define the way Monitor boxes and menus are displayed, and also to delete filters and views.
To start configuration of the Event List, select the Windows menu's Configuration option from the Monitor Box window. The Configuration window is displayed.
To name a configuration, specify a name in the Name text field.
You can also set the number of Monitor boxes allowed on an Event List using the column slider. To set the number of Monitor boxes, drag the slider until the required number is displayed.
Select either Filters or Views from the editing option button. The list of currently available filters or views is displayed. The mechanism for working with filters and views is the same, however, this section only explains working with filters.
To add a filter, click on the Load button. A file selection window is displayed. Select the filter to load and click on the OK button. The filter is added to the scrolled list.
To change a loaded filter, select the filter to change and select Edit or double-click the name in the scrolled list. The Filter Builder is displayed with the filter loaded.
Click on the Apply button in the Filter Builder, and the changes are applied to the named filter. When you change the name of the filter in the Filter Builder to a name that does not exist in the Event List's configuration, a new filter is created. When you change the name to one that already exists, the new filter replaces the existing filter in the Event List.
When you have finished editing, click on the Apply button to update the filter entry.
To create a new filter, click on the New button. The Filter Builder is displayed. Click on the Apply button in the builder, and the new filter is added to the list.
When you specify a name for an existing filter, the existing filter is replaced.
You can also create a new filter by using drag and drop from a running Filter Builder into the list.
To delete a filter, select the filter in the scrolled list then click on the Delete button.
Directly below the scrolled list are four buttons for rearranging the order of the filter or view lists, which change the order in which the popup menus and option buttons display the filter or view lists.
To modify the order, select an item in the list and then click on one of the following buttons:
To display the Event List Preferences window, select the Window menu's Preferences option. This window allows you to set global preferences for the Event List.
The Event List Preferences window comprises five tabs for each of the types of preference: Monitors, Refresh, Notification, Flash and Misc.
Figure 2-5 shows the Event List Preferences window.
The following sections describe the preference types.
You can configure the Monitor boxes in the Monitor Box window to define which statistics are displayed.
To configure the Monitor box, click on the Monitors tab. Select from the following:
You can also select the type of graphical distribution indicator. Select either:
You can configure the Event List to update at a selected time rather than awaiting notification of updates from the Cisco Info Server. Click on the Refresh tab then select the Timed Refresh option. Specify a time (in seconds) in the field.
All of the latest data from the Cisco Info Server is re-sent to the Event List at the selected time.
Do not set refresh to a low value, for example, less than 60 seconds, as this has an impact on Cisco Info Server performance. Note, this option forces the Event List to completely reload all of its data at the set interval. This may have an impact on network traffic.
When you iconify an Event List, you can be notified of any alerts that occur in the Event List.
To receive a notification, click on the Notification tab, then select the Notify when Iconised option. Set the When and How options to define the type of notification. Table 2-1 displays the notification options.
To activate these options, close any open Event Lists and reopen them.
| Option | Type of Notification |
|---|---|
When |
|
How |
Open Window to open the Event List on the screen. When you use a window manager with interactive placement, the Event List displays as the active window.
|
To set the option for a flashing Event List, click on the Flash tab.
Select the Enable Flashing option to use flashing alerts on the Event List. You can then configure the flashing option:
To set `miscellaneous details, click on the Misc tab.
Select the Show Colors option to use color to indicate the severity of alerts in Event List windows. You can select this option to change the Event List to monochrome and not display the severity color.
Select the Sort Information Details option to alphabetically sort the detail fields in the Information window, by name of field. When this is not selected, the detail fields are displayed in random order.
This section describes how to use the Event List using a Java-enabled Web browser.
The Java Event List allows you to view and manage Cisco Info Center alerts. The Java Event List displays alerts from the Cisco Info Server using the World Wide Web (WWW).
One of the benefits of using a Java Event List is you can view the information in the Cisco Info Server without the need to login to Cisco Info Center.
To display a Java Event List, you run an applet, which connects to a Cisco Info Server. The applet is configured by your system administrator or Web manager. Therefore, the exact layout of the your Java Event List, and the available functions, cannot be shown in this manual. However, examples of common formats are provided in the following sections, along with an explanation of how to use the features.
To start the Java Event List, you must have a Java-enabled Web browser running. In the browser, go to the URL of the Web page set up for displaying the Cisco Info Center alerts. Contact your system administrator for more information about the layout of the Web pages.
The following sections provide examples on how a Java Event List might be configured.
When displaying the Web page containing the Cisco Info Center alerts, you may be required to authenticate your identity and password. See Section, "Authenticate", for more information.
When you display an Event List, one or more Monitor boxes are displayed. A Monitor box displays information about the underlying Event List. Each Monitor box represents an Event List that has been filtered to pre-defined criteria.
For example, the Event List may be filtered to display only alerts with a severity of Warning (3) and above.
The information in the Monitor box can include the following items:
To display the Event List, click on the button at the top of the Monitor box. This button displays the Event List name and an Event List is displayed.
The Event List displays the alerts in a scrollable window. When the alerts arrive from the Cisco Info Server, they appear at the bottom of the list, and the display scrolls.
Figure 2-6 shows an example Java Event List.
The Event List is automatically updated at timed intervals with the information from the Cisco Info Server.
However, you can choose to update the Event List at any point. To update the alerts, you must first select refresh mode. Select the File menu's Refresh Mode option, then select Manual from the sub list. Next, select the File menu's Refresh option to update the list.
Some operations in the Java Event List require you to authenticate your identity and password. Select the File menu's Authenticate option to authenticate yourself for all operations. Specify your user ID and your password in the Authenticate window.
When you do not use this option, you may be requested to authenticate yourself when you use other operations.
To work with the Java Event List, you must select an alert. To select an alert, click on the mouse button on an alert in the Event List.
To select more than one alert, press and hold the Control key, then click on each of the alerts you want to select. To select all of the alerts in the Event List, select the Edit menu's Select All option. To deselect any of the alerts, select the Edit menu's Deselect All option.
Each alert in the Event List has an associated priority, which is distinguished by its color in the display.
To change the priority of an alert, click on the alert to select it, then select the Alerts menu's Priorities option. Select a priority setting from the sub-menu.
The priority settings are:
To acknowledge you are dealing with an alert, select the Alerts menu's Acknowledged option. This acknowledges all of the selected alerts. The number of alerts you have acknowledged is displayed at the bottom of the Event List window.
To deacknowledge an alert, select the Alerts menu's Deacknowledge option. This deacknowledges all of the selected alerts. The number of alerts you have deacknowledged is displayed at the bottom of the Event List window.
To delete an alert, select the Alerts menu's Delete option. This deletes all of the selected alerts. You can only delete alerts when your permissions allow you to do so.
To display more information about an alert, click on the alert to select it, then select the Alerts menu's Information option. This operation does not require authentication.
To display the journal information about an alert, click on the alert to select it, then select the Alerts menu's Journal option. This operation does not require authentication.
To display the full report information about an alert, that is, both the information and journal, click on the alert to select it, then select the Alerts menu's Report option. This operation does not require authentication.
To specify information in the journal for an alert, select the Alerts menu's Add to Journal option. This operation requires authentication. Specify your user name and password.
Your system administrator can configure the Event List to display the menus as tabs. Figure 2-7 provides an example of the menu tabs.
The tabs in this example represent menus. For example, the File tab displays four buttons: Refresh, Authenticate, Deauthenticate, and Quit. In this example, to refresh the Event List, click on the Refresh button.
The other menus displayed in this example are: Edit, Alerts, Change, and JEL Everything-Auto. Note, the Alerts and Change tabs contain the functions available in the Alerts menu displayed in Section, "Event List Displayed from a Monitor Box".
Posted: Thu Apr 1 10:36:42 PST 1999
Copyright 1989-1999©Cisco Systems Inc.
