Event Class Configuration Properties

Just as device classes and devices have configuration properties, so do event classes and event class mappings. Configuration properties are applied hierarchically, with the most specific property being applied.

The following configuration properties are available on event classes and class mappings.

  • zEventAction- How and where affected events are stored when they occur.

    • status- Active events table with original event state

    • history- Active events table with closed event state

    • drop- Events are not stored

  • zEventClearClasses- Optional list of event class names whose active events will be cleared by clear events occurring in this class.

  • zEventSeverity- The severity of affected events is changed to this value unless the Default value (-1) is used.

  • zFlappingIntervalSeconds- Defines the time interval to check for event flapping (changing severity level repeatedly). Default value is 3600 seconds.

  • zFlappingSeverity- Define the severity to check for event flapping. If the severity level on an event changes from this value a certain number of times (zFlappingThreshold) within a certain time range (zFlappingIntervalSeconds) then an event flapping event is generated. Possible values include: 5-Critical, 4-Error, 3-Warning, 2-Info, 1-Debug, and 0-Clear.

  • zFlappingThreshold- Number of times an event severity must flap within an interval. One of the parameters to define in order to generate event flapping events.

A good example of how the system uses the event class configuration properties is found in the /Status event class. Within the /Status event class' configuration properties, zEventAction is set to "history" and zEventSeverity is set to "Default". This means that events sent with this event class are sent into the active events table with an initial state of closed, and the event severity unchanged.

For more information about event manipulation techniques, see Mapping and Transformation.