Audit Alert Action

This section contains the following:

§ “Alert Action Audit Database” on page 1067

§ “Alert Action Audit Table” on page 1067

Overview

In many solutions, Alert Event Management can be the most critical part of an RTView application. Understanding what actions were taken by which user to resolve the situations related to active alerts are important pieces of data to fine tune work flow. Alert audits also help validate that correct actions were performed in a timely fashion when critical events occur.

Once Alert auditing is configured and enabled, the Alert data source will add an entry to the specified “Alert Action Audit Table” whenever an alert command is executed. Select Tools>Options>“Alerts Tab” to enable Alert Action Auditing.

The Alert data source provides auditing for the following commands. Each time one of these commands is executed, RTView will write a row to the specified Alert Action Audit Table displaying the Command Name in the ACTION field.

Command Name	Action	Type	Target Value
Acknowledge Alert	Event Management	Alert ID	Blank
Add Comment	Event Management	Alert ID	Comment
Clear Alert	Event Management	Alert ID	Blank
Clear Comments	Event Management	Alert ID	Blank
Set Custom Alert Event Attribute	Event Management	Alert ID	Attribute Value
Set Owner	Event Management	Alert ID	Owner
Add Alert Definition File	Configuration Management	Name of the alert definition file	Specified substitution(s) or blank
Enable Alerts	Configuration Management	Blank	Enable value
Enable Alert Definition Alert Name	Configuration Management	Name of the Alert Definition	Enable value
Remove Alert Definition File	Configuration Management	Name of the alert definition file	Specified substitution(s) or blank
Unacknowledge Alert	Event Management	Alert ID	Blank

Alert Action Audit Database

On the “SQL Tab” of the Application Options dialog, define connection to the database that contains the Alert Action Audit table in which alert actions audit information will be stored. Once defined, you must specify the Alert Action Audit Database Name on the “Alerts Tab” of the Application Options dialog or on the command line.

Alert Action Audit Table

The Alert Action Audit table must be configured with the following columns.

Note: Sample database table schemas are available under RTV\dbconfig\alert_action_audit.

Once the table is configured, you must specify the Alert Action Audit Table Name on the “Alerts Tab” of the Application Options dialog or on the command line.

Name	Type	Description
TIME_STAMP	Timestamp	Time the action was executed.
USER	String	User name from the RTView login or No Login if login was disabled.
ACTION TYPE	String	Type of action taken. The ACTION TYPE depends on the command. See “Audit Alert Action” for more information.
ACTION	String	Action taken. This will be the name of the command, with the exception of the Set Custom Alert Event Attribute command which will be Set <Attribute Name> (e.g. Set MyCustomAttrField).
TARGET	String	Target of the action. The TARGET depends on the command. See “Audit Alert Action” for more information.
VALUE	String	The value of the action. The VALUE depends on the command. See “Audit Alert Action” for more information.
ALERT_NAME	String	Name of the Alert. Valid only for Event Management type alert actions. Note: This field will be empty for Configuration Management type actions or if the value of the alert is scalar.
ALERT_INDEX	String	Index number of the Alert. Valid only for Event Management type alert actions. Note: This field will be empty for Configuration Management type actions.