Events

Learn about what you may see within Oracle Communications Unified Assurance when you click Events in the main navigation menu.

About Events

Unified Assurance Fault Manager is a manager of managers that aggregates and correlates fault and event information from infrastructure components and the services they deliver. Various aggregators and collectors collect and deduplicate events from devices, systems, and external enterprise and network management systems using a variety of device interface methods, such as syslog, SNMP Trap, email, and TL1. You can also collect events from external systems by flat file, TCP socket, and database queries.

After collecting events into the real-time events engine, Unified Assurance can apply a number of tools to correlate and enrich events, connect to external ticketing systems, and send notifications.

The Unified Assurance UI shows events in customizable lists. You can create custom event tools and filters to use on the lists, and integrate with the embedded Knowledge Base.

You can also use the Event SLM Event Connector service to create service hierarchies with thresholds and meta events to generate SLM impacted events. See SLM Examples for more information about SLM services and EventSLMEngined for more information about the Event SLM Connector service.

About Event List Filters, Displays, Menus, and Tools

Event filters let you filter the list of events by specific criteria. For example, use the default filters to see all events, all acknowledged events, availability events, events from specific time ranges, events from specific vendor devices, and more. You can also use the filter bar within filters to filter the list further by columns. You can create your own custom event filters, organize them into groups, and control which users see which event filters.

Event displays control what event fields appear in the event list, and how you can manipulate the data. You can set column names and sizes and control whether users can edit values, or filter and sort by columns. You can also set the default sorting order. For example, the default display specifies that the column for the FirstReported field is called First Occurred, and that you can filter and sort by it, but not edit it.

Event menus and tools let you perform actions when you right-click events. The default menu for users in the Operators group has tools that let you take actions like acknowledging events, viewing device information, searching the Knowledge Base, opening the event in Observability Analytics, and more. The default menu for users in the Administrators group has additional tools that let you take more advanced actions like deleting events or changing their severity.

The event filters groups, filters, displays, menus, and tools available to you depend on the user group or user owner configured for them, and on the restrictive properties set for your user group. See Configuring Ownership and Viewer Access and User Group Properties in Unified Assurance Security Guide for more information about ownership and the restrictive properties set in user groups.

See the following topics in Unified Assurance User's Guide for information about the UIs that you use to create and edit event filters, filter groups, displays, menus, and tools:

• Filters

• Filter Groups

• Displays

• Menus

• Tools

Interacting with the Event List

When you select Events from the main navigation menu, you see a list of event filter groups that contains the following folders:

• Private Filters: Contains event filters with the User Owner field set to your username.

• Filters by Group: Contains the event filters and nested filter groups under the event filter group set for your user group in the RestrictiveFilterGroupID property. See Example of Restricting Event Filter Groups for an example of how this property works.

• Filters by MetaTags: Contains any device-level meta types that have been assigned to devices in the device catalog. Each meta type is represented by a folder that contains the meta tags that have been assigned to devices with the meta type. You can click a meta tag to view the events for devices with that meta type and meta tag.

Expand a folder to see the filters in the group.

Each filter has a color-coded icon that represents the highest severity level of events in that filter. For example, if a filter has two Info events and two Major events, the icon will match the Major severity. Hover over the icon to see the number of events of each severity for that filter. Click the filter or the icon to see all of the events for the filter.

When you select a filter, the event list panel appears with events that match the filter. The panel uses the event display specified for the filter. See Displays and Filters for information about the UIs you can use to customize the information that appears in the event list.

You can interact with the event list in the following ways:

• In the button bar:

  • Select a different display or filter.

  • See the time remaining before the event list refreshes, and pause or resume the timer.

    The default value for the refresh timer is 60 seconds. You can change this value for yourself, other users, or user groups by setting the EventListRefreshRate preference. For more information, see:

    • Preferences in Unified Assurance Security Guide

    • User Groups and User Profiles in Unified Assurance User's Guide

  • Click the filter button to enter filter criteria for a column.

• Filter events by severity by clicking the buttons on the filter bar at the bottom of list. For example, click the Critical (red) button to display only events of critical severity. Each button shows the number of events of that severity. You can only select one button at a time.

• Click the expand button for an event to see detailed event information, including event ID and type, occurrence counts, IP address, event journal, symptom events, and so on. See Understanding the Default Events Fields for information about all of the fields.

• Shift-click or Ctrl-click to select multiple events.

• Click, drag, and drop the correlation icon next to an event to manually correlate events.

• Right-click an event to open the event menu. From this menu, you can select tools to run on the event or multiple selected events, depending on the tool.

  For example, click the Device Info tool to see a pop-up with detailed information about the device for the selected event.

Example of Restricting Event Filter Groups

This example demonstrates how the restrictive event filter group property controls which event filters a user sees.

The following is an example layout of grouped event filters:

• Global (Event Filter Group)

  • Event Filter Group 1

    • Event Filter Group 3

      • Event Filter E

      • Event Filter F

    • Event Filter C

  • Event Filter Group 2

    • Event Filter D

  • Event Filter A

  • Event Filter B

Users in a user group with RestrictiveFilterGroupID set to Global see the entire layout.

Users in a user group with RestrictiveFilterGroupID set to Event Filter Group 1 see:

• Event Filter Group 1

  • Event Filter Group 3

    • Event Filter E

    • Event Filter F

  • Event Filter C