2 "$schema": "http://json-schema.org/draft-04/schema#",
7 "description": "additional fields not reported elsewhere",
10 "$ref": "#/definitions/field"
14 "description": "standard request error data structure",
18 "description": "Unique message identifier of the format ABCnnnn where ABC is either SVC for Service Exceptions or POL for Policy Exception",
22 "description": "Message text, with replacement variables marked with %n, where n is an index into the list of <variables> elements, starting at 1",
26 "description": "Hyperlink to a detailed error resource e.g., an HTML page for browser user agents",
30 "description": "List of zero or more strings that represent the contents of the variables used by the message text",
34 "required": [ "messageId", "text" ]
36 "stateChangeFields": {
37 "description": "stateChange fields",
41 "description": "additional stateChange fields if needed",
44 "$ref": "#/definitions/field"
48 "description": "new state of the entity",
57 "description": "previous state of the entity",
65 "stateChangeFieldsVersion": {
66 "description": "version of the stateChangeFields block",
70 "description": "card or port name of the entity that changed state",
74 "required": [ "newState", "oldState", "stateInterface" ]
76 "suppressedNvPairs": {
77 "description": "List of specific NvPairsNames to suppress within a given Name-Value Field for event Throttling",
81 "description": "Name of the field within which are the nvpair names to suppress",
84 "suppressedNvPairNames": {
85 "description": "Array of nvpair names to suppress within the nvpairFieldName",
92 "required": [ "nvPairFieldName", "suppressedNvPairNames" ]
95 "description": "sysLog fields",
99 "description": "additional syslog fields if needed",
102 "$ref": "#/definitions/field"
106 "description": "hostname of the device",
110 "description": "type of event source; examples: other, router, switch, host, card, port, slotThreshold, portThreshold, virtualMachine, virtualNetworkFunction",
114 "description": "numeric code from 0 to 23 for facility--see table in documentation",
117 "syslogFieldsVersion": {
118 "description": "version of the syslogFields block",
122 "description": "syslog message",
126 "description": "0-192 combined severity and facility",
130 "description": "identifies the application that originated the message",
134 "description": "a change in the value of this field indicates a discontinuity in syslog reporting",
138 "description": "syslog structured data consisting of a structured data Id followed by a set of key value pairs",
142 "description": "0-32 char in format name@number for example ourSDID@32473",
146 "description": "numerical Code for severity derived from syslogPri as remaider of syslogPri / 8",
150 "description": "msgId indicating the type of message such as TCPOUT or TCPIN; NILVALUE should be used when no other value can be provided",
154 "description": "IANA assigned version of the syslog protocol specification - typically 1",
158 "required": [ "eventSourceType", "syslogMsg", "syslogTag" ]
160 "thresholdCrossingAlertFields": {
161 "description": "fields specific to threshold crossing alert events",
164 "additionalFields": {
165 "description": "additional threshold crossing alert fields if needed",
168 "$ref": "#/definitions/field"
171 "additionalParameters": {
172 "description": "performance counters",
175 "$ref": "#/definitions/counter"
179 "description": "Event action",
187 "alertDescription": {
188 "description": "Unique short alert description such as IF-SHUB-ERRDROP",
192 "description": "Event type",
202 "description": "Calculated API value (if applicable)",
205 "associatedAlertIdList": {
206 "description": "List of eventIds associated with the event being reported",
208 "items": { "type": "string" }
210 "collectionTimestamp": {
211 "description": "Time when the performance collector picked up the data; with RFC 2822 compliant format: Sat, 13 Mar 2010 11:29:05 -0800",
215 "description": "Specific performance collector instance used",
219 "description": "type of network element - internal ATT field",
223 "description": "event severity or priority",
233 "eventStartTimestamp": {
234 "description": "Time closest to when the measurement was made; with RFC 2822 compliant format: Sat, 13 Mar 2010 11:29:05 -0800",
238 "description": "Physical or logical port or card (if applicable)",
242 "description": "network name - internal ATT field",
245 "possibleRootCause": {
246 "description": "Reserved for future use",
249 "thresholdCrossingFieldsVersion": {
250 "description": "version of the thresholdCrossingAlertFields block",
255 "additionalParameters",
259 "collectionTimestamp",
261 "eventStartTimestamp"
265 "description": "usage of identified virtual network interface card",
268 "broadcastPacketsIn": { "type": "number" },
269 "broadcastPacketsOut": { "type": "number" },
270 "bytesIn": { "type": "number" },
271 "bytesOut": { "type": "number" },
272 "multicastPacketsIn": { "type": "number" },
273 "multicastPacketsOut": { "type": "number" },
274 "packetsIn": { "type": "number" },
275 "packetsOut": { "type": "number" },
276 "unicastPacketsIn": { "type": "number" },
277 "unicastPacketsOut": { "type": "number" },
278 "vNicIdentifier": { "type": "string" }
280 "required": [ "bytesIn", "bytesOut", "packetsIn", "packetsOut", "vNicIdentifier"]
283 "title": "Event Listener",
286 "event": {"$ref": "#/definitions/event"}