File Structure and Naming
Each event type results in one single CSV file where the file name follows the scheme <Event Name>.csv, e,g. acknowledge_svc_problem.csv.
These files include all the occured events of the particular type and are structured with the following delimeters.
Column Delimeter
| Tabulator \t |
|---|---|
| Row Delimeter | UNIX style new line \n |
Events
All rows are of data type "string", except:
| Name | Data Type |
|---|---|
| timestamp | UNIX timestamp |
| start_time | UNIX timestamp |
| end_time | UNIX timestamp |
| tries | integer, possible values: number of tries |
| notification_number | integer, possible values: number of sent notifications |
| is_fixed | integer, possible values: 0, 1 |
| is_persistent | integer, possible values: 0, 1 |
| triggered_by | integer, possible values: downtime_id |
| duration | integer, possible values: duration in seconds |
The host_name and/or service_name are the unique identifiers for each event and the events are related to each other through this id. Except for CONFIG CHANGE which has no relation to any other event.
The different possible event types with examples are listed below.
On this page:
SERVICE_ALERT
Rows timestamp host_name address service_name status type tries output perfdata downtime hostgroup_name
Data type UNIX timestamp string string string string string integer string string integer string
Example 1334580082 azeti-VRH01 192.168.120.10 perf_trend WARNING SOFT 1 (numeric growth: 0.979 gallons) in the last 60 minutes for service: Agent_based_CPU_Check diff=6.18654421367486gallons;5;11; 1 everyhost
HOST_ALERT
Rows timestamp host_name address status type tries output perfdata downtime hostgroup_name
Data type UNIX timestamp string string string string string integer string integer string
Example 1336099678 Plugin_Development 192.168.120.18 WARNING SOFT 1 OK - 192.168.120.18 responds to ICMP. Packet 1, rta 19.330ms pkt=1;;0;2 rta=19.330;1000.000;2000.000;; 1 everyhost
HOST_NOTIFICATION
Rows timestamp host_name contact_name status type notification_number output script_name
Data type UNIX timestamp string string string string integer string string
Example 1327593012 Linksys-Router devtest@azeti.net DOWN PROBLEM 397 HOST IS DOWN RIGHT NOW host-notify-by-email
SERVICE_NOTIFICATION
Rows timestamp host_name contact_name service_name status type notification_number output script_name
Data type UNIX timestamp string string string string integer string string string
Example 1327593012 vCenter01 devtest@azeti.net Agent_based_Memory_Check CRITICAL PROBLEM 143 azeti Agent - ERROR: Wrong password host-notify-by-email
ADMIN_NOTIFICATION
Rows timestamp host_name contact_name subject output
Data type UNIX timestamp string string string string
Example 1327680443 192.168.96.24 devtest@azeti.net Extension/Plugin Problem - Sonarplex 192.168.96.24 License for Addon check_azetiplugin_esx_perf not available or expired
CONFIG_CHANGE
Rows timestamp config_name item_name change_type contact_name
Data type UNIX timestamp string string string string
Example 1327680619 service Ping_Performance_Check deleted admin@192.168.96.226
ACKNOWLEDGE_SVC_PROBLEM
Rows timestamp host_name service_name is_sticky notification_number is_persistant comment_author output
Data type UNIX timestamp string string integer integer integer string string
Example 1327683838 vCenter01 Agent_based_Memory_Check 2 1 1 Administrator Thresholds should be adjusted. Maintenance.
ACKNOWLEDGE_HOST_PROBLEM
Rows timestamp host_name is_sticky notification_number is_persistant comment_author output
Data type UNIX timestamp string integer integer integer string string
Example 1327683838 3Com-Switch 2 1 1 Administrator The device is down due to a power supply failure, it is currently in repair.
REMOVE_SVC_ACKNOWLEDGEMENT
Rows timestamp host_name service_name
Data type UNIX timestamp string string
Example 1327662720 vCenter01 Agent_based_Memory_Check
REMOVE_HOST_ACKNOWLEDGEMENT
Rows timestamp host_name
Data type UNIX timestamp string
Example 1327662720 vCenter01
SCHEDULE_AND_PROPAGATE_TRIGGERED_HOST_DOWNTIME
Rows timestamp host_name start_time end_time is_fixed triggered_by duration comment_author comment_data
Data type UNIX timestamp string UNIX timestamp UNIX timestamp integer integer integer string string
Example 1327680894 vCenter01 1327680870 1332868470 1 0† 7200 Administrator Host is down for maintenance. Agent isn't running as well.
SCHEDULE_AND_PROPAGATE_HOST_DOWNTIME
Rows timestamp host_name start_time end_time is_fixed triggered_by duration comment_author comment_data
Data type UNIX timestamp string UNIX timestamp UNIX timestamp integer integer integer string string
Example 1327593166 3Com-Switch 1327593150 1327600350 1 1 3600 Administrator Something went wrong with the DSL Link.
SCHEDULE_HOST_DOWNTIME
Rows timestamp host_name start_time end_time is_fixed triggered_by duration comment_author comment_data
Data type UNIX timestamp string UNIX timestamp UNIX timestamp integer integer integer string string
Example 1327663851 3Com-Switch 1327663848 1327671048 1 0† 7200 Administrator OS upgrade, scheduled maintenance.
SCHEDULE_SVC_DOWNTIME
Rows timestamp host_name start_time end_time is_fixed triggered_by duration comment_author comment_data
Data type UNIX timestamp string UNIX timestamp UNIX timestamp integer integer integer string string
Example 1327662786 3Com-Switch 1327662777 1327669977 0† 0† 7200 Administrator Service downtime due to reconfiguration of device.
Unfortunately there is currently a bug about the 'donwtime_id' field for the 'DEL ...' events. The id is not passed within the 'SCHEDULE ...' events, therefore the deletion of a downtime cannot easily be connected to a scheduling. This will be fixed in the future.
DEL_HOST_DOWNTIME
Rows timestamp downtime_id
Data type UNIX timestamp integer
Example 1327664019 15
DEL_SVC_DOWNTIME
Rows timestamp downtime_id
Data type UNIX timestamp integer
Example 1327662952 2
| Rows | timestamp | host_name | address | service_name | status | type | tries | output | perfdata | downtime | hostgroup_name
|
|---|---|---|---|---|---|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | string | string | string | string | integer | string | string | integer | string
|
| Example | 1334580082 | azeti-VRH01 | 192.168.120.10 | perf_trend | WARNING | SOFT | 1 | (numeric growth: 0.979 gallons) in the last 60 minutes for service: Agent_based_CPU_Check | diff=6.18654421367486gallons;5;11; | 1 | everyhost |
| Rows | timestamp | host_name | address | status | type | tries | output | perfdata | downtime | hostgroup_name
|
|---|---|---|---|---|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | string | string | string | string | integer | string | integer | string
|
| Example | 1336099678 | Plugin_Development | 192.168.120.18 | WARNING | SOFT | 1 | OK - 192.168.120.18 responds to ICMP. Packet 1, rta 19.330ms | pkt=1;;0;2 rta=19.330;1000.000;2000.000;; | 1 | everyhost |
| Rows | timestamp | host_name | contact_name | status | type | notification_number | output | script_name
|
|---|---|---|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | string | string | string | integer | string | string
|
| Example | 1327593012 | Linksys-Router | devtest@azeti.net | DOWN | PROBLEM | 397 | HOST IS DOWN RIGHT NOW | host-notify-by-email |
| Rows | timestamp | host_name | contact_name | service_name | status | type | notification_number | output | script_name
|
|---|---|---|---|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | string | string | string | integer | string | string | string
|
| Example | 1327593012 | vCenter01 | devtest@azeti.net | Agent_based_Memory_Check | CRITICAL | PROBLEM | 143 | azeti Agent - ERROR: Wrong password | host-notify-by-email |
| Rows | timestamp | host_name | contact_name | subject | output
|
|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | string | string | string
|
| Example | 1327680443 | 192.168.96.24 | devtest@azeti.net | Extension/Plugin Problem - Sonarplex 192.168.96.24 | License for Addon check_azetiplugin_esx_perf not available or expired |
| Rows | timestamp | config_name | item_name | change_type | contact_name
|
|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | string | string | string
|
| Example | 1327680619 | service | Ping_Performance_Check | deleted | admin@192.168.96.226 |
| Rows | timestamp | host_name | service_name | is_sticky | notification_number | is_persistant | comment_author | output
|
|---|---|---|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | string | integer | integer | integer | string | string
|
| Example | 1327683838 | vCenter01 | Agent_based_Memory_Check | 2 | 1 | 1 | Administrator | Thresholds should be adjusted. Maintenance. |
| Rows | timestamp | host_name | is_sticky | notification_number | is_persistant | comment_author | output
|
|---|---|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | integer | integer | integer | string | string
|
| Example | 1327683838 | 3Com-Switch | 2 | 1 | 1 | Administrator | The device is down due to a power supply failure, it is currently in repair. |
| Rows | timestamp | host_name | service_name
|
|---|---|---|---|
| Data type | UNIX timestamp | string | string
|
| Example | 1327662720 | vCenter01 | Agent_based_Memory_Check |
| Rows | timestamp | host_name
|
|---|---|---|
| Data type | UNIX timestamp | string
|
| Example | 1327662720 | vCenter01 |
| Rows | timestamp | host_name | start_time | end_time | is_fixed | triggered_by | duration | comment_author | comment_data
|
|---|---|---|---|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | UNIX timestamp | UNIX timestamp | integer | integer | integer | string | string
|
| Example | 1327680894 | vCenter01 | 1327680870 | 1332868470 | 1 | 0† | 7200 | Administrator | Host is down for maintenance. Agent isn't running as well. |
| Rows | timestamp | host_name | start_time | end_time | is_fixed | triggered_by | duration | comment_author | comment_data
|
|---|---|---|---|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | UNIX timestamp | UNIX timestamp | integer | integer | integer | string | string
|
| Example | 1327593166 | 3Com-Switch | 1327593150 | 1327600350 | 1 | 1 | 3600 | Administrator | Something went wrong with the DSL Link. |
| Rows | timestamp | host_name | start_time | end_time | is_fixed | triggered_by | duration | comment_author | comment_data
|
|---|---|---|---|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | UNIX timestamp | UNIX timestamp | integer | integer | integer | string | string
|
| Example | 1327663851 | 3Com-Switch | 1327663848 | 1327671048 | 1 | 0† | 7200 | Administrator | OS upgrade, scheduled maintenance. |
| Rows | timestamp | host_name | start_time | end_time | is_fixed | triggered_by | duration | comment_author | comment_data
|
|---|---|---|---|---|---|---|---|---|---|
| Data type | UNIX timestamp | string | UNIX timestamp | UNIX timestamp | integer | integer | integer | string | string
|
| Example | 1327662786 | 3Com-Switch | 1327662777 | 1327669977 | 0† | 0† | 7200 | Administrator | Service downtime due to reconfiguration of device. |
Unfortunately there is currently a bug about the 'donwtime_id' field for the 'DEL ...' events. The id is not passed within the 'SCHEDULE ...' events, therefore the deletion of a downtime cannot easily be connected to a scheduling. This will be fixed in the future.
| Rows | timestamp | downtime_id
|
|---|---|---|
| Data type | UNIX timestamp | integer
|
| Example | 1327664019 | 15 |
| Rows | timestamp | downtime_id
|
|---|---|---|
| Data type | UNIX timestamp | integer
|
| Example | 1327662952 | 2 |