EMS Manual

EMS Definitions
EMS Manual—426909-005
14-4
Definitions of EMS Tokens in the Event Message
Header
Definitions of EMS Tokens in the Event Message Header
The remainder of the event-message header tokens are EMS tokens:
ZEMS-TKN-EVENTNUMBER
(type enum; shared) is a number that a particular
subsystem assigns to an event to identify it. Event
numbers represent unique events only for a particular
subsystem because each subsystem can use event
numbers in the same range.
Therefore, to identify an event, you must know both the
event number and the subsystem ID of the subsystem
that created the event message.
ZEMS-TKN-GENTIME
(type timestamp; shared) is the time (Greenwich mean
time) that the reporting subsystem created the event
message. In most cases, ZEMS-TKN-GENTIME is close
to the time the event occurred.
ZEMS-TKN-LOGTIME
(type timestamp; shared) is the time (Greenwich mean
time) that the collector wrote the event message to its log
files. Event messages are ordered in the log files based
on log time, not generation time.
ZEMS-TKN-LOGTIME changes if the event message is
forwarded to another collector. No other token values
change in this way.
ZEMS-TKN-NODENUM
(type int2; shared) is the EXPAND node (system)
number of the node in which the event was reported.
ZEMS-TKN-CPU
(type uint; shared) is the CPU of the reporting
subsystem process.
ZEMS-TKN-PIN
(type uint; shared) is the PIN of the reporting
subsystem process.
ZEMS-TKN-PROC-DESC
(type string; shared) is the process descriptor of the
event creator.
ZEMS-TKN-USERID
(type byte-pair; shared) is the user ID of the reporting
subsystem process.
ZEMS-TKN-CONSOLE-PRINT
(type Boolean; shared) is no longer used by the
compatibility distributor.