XYGATE Merged Audit Reference Manual

XYGATE Merged Audit
®
Reference Manual
Glossary
XYPRO Technology Corporation 304 Proprietary and Confidential
ALERTTARGET Filter Keyword
Filters with an ALERT ACTIONTYPE require the ALERTTARGET keyword to define
where the EMS message should be sent. Most often it will be your EMS collector. If
you choose to do so, you could send all the ALERTS for all the nodes on your network
to a single, dedicated EMS collector located on the Parent node. In this case, enter the
master node’s name. The default is \<node>.$0, where system is the node where the
MOVER is running.
If you want an alert to go to more than one collector, you must create a separate Filter
for each ALERTTARGET.
Syntax:
{\SYSTEM.$0|<terminal id>}
ALERTSEVERITY Filter Keyword
Filters with an ALERT ACTIONTYPE use the ALERTSEVERITY keyword to determine
whether or not this message should be marked as critical within EMS. If you do not
assign the severity, the fault value of NONCRITICAL is used.
Syntax:
ALERTSEVERITY {CRITICAL|NONCRITICAL}
ALERTEMSEVENTNUMBER Filter Keyword
Filters with an ALERT ACTIONTYPE will use the ALERTEMSEVENTNUMBER
keyword to assign the designated event number to the EMS message. The value
range is between 1000 and 32767. This parameter is optional. If you do not assign an
event number, the default value of 101 is used.
Syntax:
ALERTEMSEVENTNUMBER <number>
ALERTSTRING Filter Keyword
Filters with an ALERT ACTIONTYPE will use the ALERTSTRING keyword to create
the EMS message “title.” You can include Data Substitution Tokens within the
ALERTSTRING you specify.
This keyword defines the data or text that will be sent to the SYSLOG. It can be a
combination of text and Data Substitution Tokens. It may be up to 127 characters in
length. Any message longer than 127 characters will be truncated, so for longer
messages, use additional ALERTSTRING keywords. The default is the RESULT
column from the Audit Detail Table.
Syntax:
ALERTSTRING <string>