EMS Manual

EMS Usage Best Practices and Recommendations
EMS Manual—426909-005
D-4
Event Emphasis Guidelines
EMS-SEV-111: ZEMS-TKN-ISO-SEVERITY should be used according to the following
guidelines:
EMS-SEV-121: When in doubt, a less severe value of the ZEMS-TKN-ISO-SEVERITY
token should be used rather than a more severe value.
Event Emphasis Guidelines
EMS-EMP-101: All events that have the ZEMS-TKN-ISO-SEVERITY token value as
ZEMS-VAL-SEVERITY-CRITICAL or ZEMS-VAL-SEVERITY-MAJOR should set the
ZEMS-TKN-EMPHASIS token to true.
EMS-EMP-111: All events that have the ZEMS-TKN-ISO-SEVERITY token value as
ZEMS-VAL-SEVERITY-MINOR, ZEMS-VAL-SEVERITY-WARNING, or ZEMS-VAL-
SEVERITY-CLEARED, or do not have the ZEMS-TKN-ISO-SEVERITY token, should
NOT use the ZEMS-TKN-EMPHASIS token.
Event Text Guidelines
EMS-TXT-101: Event text message should have sufficient information to understand
the event, without looking at all the tokens in the event.
Token value When to use
ZEMS-VAL-SEVERITY-CRITICAL Critical condition that indicates a service
affecting condition has occurred, requiring an
immediate corrective action (e.g., significant
degradation of performance, loss of software
availability, loss of data, loss of application
stability, security breaches, crossing of
thresholds into a “red” zone)
ZEMS-VAL-SEVERITY-MAJOR Major condition that indicates that a service
affecting condition has developed, requiring an
urgent action (e.g., not significant performance
degradation, loss of capacity, crossing of
thresholds into a “yellow” zone)
ZEMS-VAL-SEVERITY-MINOR Minor condition that indicates a non-service
affecting fault, generally not requiring any
action (e.g., proactive failures, still in the
“green” zone)
ZEMS-VAL-SEVERITY-WARNING Indicates that a potential Major or Critical
condition could occur in the future
ZEMS-VAL-SEVERITY-CLEARED Problem is fixed