Alert Policy

All alert policy actions and errors are written to the log SP-EAI. Every action and trace message related to its execution is logged. The following table lists the message types in the log SP-EAI on which you can filter.

Message Type

Description

AC

Reports on the current state of an action execution; it includes whether the action was initiated, delayed by another action, successfully completed, failed, or discarded.

CN

Designates control messages that indicate when a new alert policy is activated or deactivated.

DT

Reports all data read or written to a service connection for serial and modem actions.

ER

Designates errors related to activating or deactivating an alert policy, or event reports related to nonexistent action lists and actions.

See the Operations Sentinel Console Help for more information about alert policies.

AC Message Type

Messages of type AC record the current execution state of an action. The Class, Instance, AlertId, AlertQual, Appl, ApplQual, Sev, and Ext_Action_List attributes of the alert event report that caused the action are listed in the first few lines of the log entry. You can use this information to identify and find the complete event report in the log SP-SPALS. When the action is no longer waiting for a time delay to expire or for a server connection resource, it runs as an independent process, and the associated process identifier (pid) is included in the log entry. You can identify the executed action by its alert policy action list, template, event type, and other template-dependent information.

DT Message Type

Messages of type DT are logged for actions using a serial or modem template. These log entries identify the service connection where data was read from or written to. You can use the process ID (pid) recorded in the entry to determine the action that caused this traffic. The byte length of the message is also displayed, and any control characters are shown in hexadecimal representation as a backslash (\) followed by two hexadecimal digits.