Audit Alert Action
In many solutions, Alert Event Management can be the
most critical part of an RTView application. Understanding what actions were
taken by which user to resolve the situations related to active alerts are
important pieces of data to fine tune work flow. Alert audits also help validate
that correct actions were performed in a timely fashion when critical events
occur.
Once
Alert auditing is configured and enabled, the Alert data source will add an
entry to the specified Alert Action Audit
Table whenever an alert command is executed.
Select Tools>Options>Alerts to
Enable Alert Action Auditing.
The Alert data source provides auditing for the
following commands. Each time one of these commands is executed, RTView will
write a row to the specified Alert Action Audit Table displaying the Command
Name in the ACTION field.
| Command Name |
Action Type |
Target |
Value |
| Acknowledge Alert |
Event
Management |
Alert ID |
Blank |
| Add Comment |
Event
Management |
Alert ID |
Comment |
| Clear Alert |
Event
Management |
Alert ID |
Blank |
| Clear Comments |
Event
Management |
Alert ID |
Blank |
| Set Custom Alert Event Attribute |
Event
Management |
Alert ID |
Attribute Value |
| Set Owner |
Event
Management |
Alert ID |
Owner |
| Add Alert Definition File |
Configuration Management |
Name of the alert
definition file |
Specified
substitution(s) or blank. |
| Enable Alerts |
Configuration Management |
Blank |
Enable value |
| Enable Alert Definition Alert
Name |
Configuration Management |
Name of the Alert
Definition |
Enable value |
| Remove Alert Definition File |
Configuration Management |
Name of the alert
definition file |
Specified
substitution(s) or blank. |
| Unacknowledge Alert
|
Event
Management |
Alert ID |
Blank |
Alert Action Audit Database
On the SQL tab of the
Application Options dialog, define connection to the database that contains the
Alert Action Audit table in which alert actions audit information will be
stored. Once defined, you must specify the
Alert Action Audit
Database Name on the Alerts
tab of the Application Options dialog or on the
command line.
Alert Action Audit
Table
The Alert Action Audit table must be configured with the following columns.
NOTE: Sample database table schemas are available under RTV\dbconfig\alert_action_audit.
Once the table is configured, you must specify
the
Alert Action Audit
Table Name on the Alerts
tab of the Application Options dialog or on the
command line.
| Name |
Type |
Description |
| TIME_STAMP |
Timestamp |
Time the
action was executed. |
| USER |
String |
User name
from the RTView login or No Login if login was disabled. |
|
ACTION TYPE |
String |
Type of
action taken. The ACTION TYPE depends on the command. |
| ACTION |
String |
Action
taken. This will be the name of the command, with the exception of the Set
Custom Alert Event Attribute command which will be Set <Attribute Name>
(e.g. Set MyCustomAttrField). |
| TARGET |
String |
Target of
the action. The TARGET depends on the command. |
| VALUE |
String |
The value
of the action. The VALUE depends on the command. |
|
ALERT_NAME |
String |
Name of
the Alert. Valid only for Event Management type alert actions.
NOTE: This field will be empty for Configuration
Management type actions or if the value of the alert is scalar. |
|
ALERT_INDEX |
String |
Index number of the
Alert. Valid only for Event Management type alert actions.
NOTE: This field will be empty for Configuration
Management type actions. |
|
