The value of the eventclass key in Sentinel's event field specifies a class of events where this particular event belongs. This mechanism allows classification of multiple events into a single event class, even when their message bodies and/or other ExtendedInformation key/value pairs differ. For example, any event detailing the logout of a user from an Orchestration Server administrator account is classified with the event class admin_logout. This event class also serves as the taxonomy key for use by Sentinel.
Many log events are currently unclassified, so their event classes are also unclassified. We anticipate the number of unclassified log events to decrease incrementally over subsequent Cloud Manager Orchestration Server releases.
All non-failure events are logged on success rather than on action initiation. For example, an event with the event class job_deployed would only be seen after the job had been successfully deployed, not when the deployment attempt was initiated.
Table 6-4 eventclass Taxonomy Keys
|
Value of the eventclass Taxonomy Key |
Events in This Classification |
Other Keys Typically Used with This Class of Events |
|---|---|---|
|
unclassified |
Any event not yet assigned an event class. |
|
|
sentinel |
Events relating to integration of Cloud Manager Orchestration Server with Sentinel. |
|
|
authorization_failure |
Any kind of authorization failure. |
action |
|
authentication_failure |
Any kind of authentication failure. |
action |
|
admin_login |
Login to a Orchestration Server administrator account (for example, through zosadmin or through the Orchestration Console). |
user |
|
admin_logout |
Logout from a Orchestration Server administrator account (for example, through zosadmin or through the Orchestration Console). |
user |
|
user_login |
Logout from a grid user account. |
user |
|
user_logout |
Login of a resource to the grid. |
user |
|
user_password_change |
Password change for grid user account. |
user |
|
resource_login |
Logout of a resource from the grid. |
resource |
|
resource_logout |
Logout of a resource from the grid. |
resource |
|
repository_created |
New repository created. |
repository |
|
repository_deleted |
Repository deleted. |
repository |
|
resource_created |
New resource created. |
resource, type |
|
resource_deleted |
Resource deleted. |
resource |
|
user_created |
New user created. |
user |
|
user_deleted |
User deleted. |
user |
|
session_not_found |
User or agent session not found. |
session |
|
vbridge_created |
New vBridge created. |
vbridge, vmhost |
|
vbridge_deleted |
vBridge deleted. |
vbridge |
|
vdisk_created |
New vDisk created. |
vdisk, vm |
|
vdisk_deleted |
vDisk deleted. |
vbridge |
|
vnic_created |
New vNIC created. |
vnic, vm |
|
vnic_deleted |
vNIC deleted. |
vnic |
|
group_created |
New group created. |
group, type |
|
group_deleted |
Group deleted. |
group, type |
|
group_member_added |
New member added to the Grid object group. |
group, member, type |
|
group_member_removed |
Member removed from the Grid object group. |
group, member, type |
|
job_deployed |
New job deployed to the grid. |
job |
|
job_undeployed |
Job undeployed from the grid. |
job |
|
schedule_deployed |
New schedule deployed to the grid. |
schedule |
|
schedule_undeployed |
Schedule undeployed from the grid. |
schedule |
|
trigger_deployed |
New trigger deployed to the grid. |
trigger |
|
trigger_undeployed |
Trigger undeployed from the grid. |
trigger |
|
policy_association |
Association of an Orchestration Server policy with a Grid object. |
policy, target |
|
policy_disassociation |
Disassociation of an Orchestration Server policy with a Grid object. |
policy, target |
|
policy_created |
Policy added to the grid. |
policy |
|
policy_removed |
Policy removed from the grid. |
policy |
|
job_started |
Job (instance) started. |
jobinstance |
|
job_finished |
Job (instance) finished. |
jobinstance, outcome (completed, canceled, or failed), reason (when canceled) |
|
vm_applyconfig |
VM apply config action initiated. |
vm, user |
|
vm_build |
VM build action initiated. |
vm, user |
|
vm_check_status |
VM check status action initiated. |
vm, user |
|
vm_checkpoint |
VM checkpoint action initiated. |
vm, user, checkpoint |
|
vm_clone |
VM clone action initiated. |
vm, user |
|
vm_create_template |
VM create_template action initiated. |
vm, user |
|
vm_delete |
VM delete action initiated. |
vm, user |
|
vm_destroy |
VM destroy action initiated. |
vm, user |
|
vm_install_agent |
VM install agent action initiated. |
vm, user |
|
vm_make_standalone |
VM make standalone action initiated. |
vm, user |
|
vm_migrate |
VM migrate action initiated. |
vm, user |
|
vm_move |
VM move action initiated. |
vm, user |
|
vm_pause |
VM pause action initiated. |
vm, user |
|
vm_personalize |
VM personalize action initiated. |
vm, user |
|
vm_provision |
VM provision action initiated. |
vm, user |
|
vm_restart |
VM restart action initiated. |
vm, user |
|
vm_restore |
VM restore action initiated. |
vm, user, checkpoint |
|
vm_resume |
VM resume action initiated. |
vm, user |
|
vm_saveconfig |
VM save config action initiated |
vm, user |
|
vm_shutdown |
VM shutdown action initiated. |
vm, user |
|
vm_suspend |
VM suspend action initiated. |
vm, user |
|
resource_healthy |
The Resource became healthy. |
resource |
|
resource_unhealthy |
The Resource became unhealthy. |
resource |
|
repository_healthy |
The Repository became healthy. |
repository |
|
repository_unhealthy |
The Repository became unhealthy. |
repository |
|
vbridge_healthy |
The vBridge became healthy. |
vbridge |
|
vbridge_unhealthy |
The vBridge became unhealthy. |
vbridge |
|
vnic_healthy |
The vNIC became healthy. |
vnic |
|
vnic_unhealthy |
The vNIC became unhealthy. |
vnic |
|
vdisk_healthy |
The vDisk became healthy. |
vdisk |
|
vdisk_unhealthy |
The vDisk became unhealthy. |
vdisk |
|
vmhost_healthy |
The VM host became healthy. |
vmhost |
|
vmhost_unhealthy |
The VM host became unhealthy. |
vmhost |