TYPE, which has a value of AL for all alerts.

CLASS, which indicates the object type.

INSTANCE, which is the name of the object (system) to which the alert applies.

SEV, which indicates the severity of an alert to be raised, or if an alert is to be acknowledged or cleared.

APPL, which names the source of the event.

ALERTID, which identifies the type of alert that is to be raised, acknowledged, or cleared.

TEXT, which is the text displayed in the Alerts window of Operations Sentinel Console; required when the event report raises an alert and optional when the event report acknowledges or clears an alert.