Exceptional events are generated very rarely, and are considered important because they are generated. For instance, shutting down an enterprise-critical server is exceptional because it can’t happen without someone's permission.
Table 5-10 Exceptional Event Taxonomy
|
Event Name |
Event Identifier |
Corresponding eDir Event |
Description |
Use |
|---|---|---|---|---|
|
Start System |
0.0.9.0 |
DSE_AGENT_OPEN_LOCAL DSE_RELOAD_DS |
Start a system |
This event is reported when a server, system, or mission-critical application starts up. |
|
Shutdown System |
0.0.9.1 |
DSE_AGENT_CLOSE_LOCAL |
Shutdown a system |
This event is reported when a server, system, or mission-critical application shuts down. |
|
Back up Data Store |
0.0.9.6 |
DSE_BACKUP_ENTRY |
Back up Data Store |
This event is reported when a server, system, or mission critical application backs up a critical data store. |
|
Recover Data Store |
0.0.9.7 |
DSE_RESTORE_ENTRY |
Recover Data Store |
This event is reported when a server, system, or mission critical application restores a critical data store. |
The following sections include example for exceptional events.
Click Start System to generate an event when a server, system, or mission-critical application starts, as shown in the following example:
Jan 08 16:18:58 eDirectory : INFO {"Source" : "eDirectory#DS","Observer" : {"Account" : {"Domain" : "GMC1-OESMARA","Name" : "CN=SLES11-SP3-191,O=novell"},"Entity" : {"SysAddr" : "164.99.179.191","SysName" : "sles11-sp3-191"}},"Initiator" : {"Account" : {"Domain" : "GMC1-OESMARA","Name" : "CN=SLES11-SP3-191,O=novell"},"Entity" : {"SysAddr" : "0.0.0.0:0"}},"Action" : {"Event" : {"Id" : "0.0.9.0","Name" : "START_SYSTEM","CorrelationID" : "eDirectory#0#","SubEvent" : "DSE_AGENT_OPEN_LOCAL"},"Time" : {"Offset" : 1390474138},"Log" : {"Severity" : 7},"Outcome" : "0","ExtendedOutcome" : "0"}}
Click Shutdown System to generate an event when a server, system, or mission-critical application shuts down, as shown in the following example:
Jan 08 16:18:47 eDirectory : INFO {"Source" : "eDirectory#DS","Observer" : {"Account" : {"Domain" : "GMC1-OESMARA","Name" : "CN=SLES11-SP3-191,O=novell"},"Entity" : {"SysAddr" : "164.99.179.191","SysName" : "sles11-sp3-191"}},"Initiator" : {"Account" : {"Domain" : "GMC1-OESMARA","Name" : "CN=SLES11-SP3-191,O=novell"},"Entity" : {"SysAddr" : "0.0.0.0:0"}},"Action" : {"Event" : {"Id" : "0.0.9.1","Name" : "SHUTDOWN_SYSTEM","CorrelationID" : "eDirectory#0#","SubEvent" : "DSE_AGENT_CLOSE_LOCAL"},"Time" : {"Offset" : 1390474127},"Log" : {"Severity" : 7},"Outcome" : "0","ExtendedOutcome" : "0"}}
Click Recover Data Store to generate an event when a server, system, or mission-critical application recovers a data store, as shown in the following example:
Jan 08 10:18:35 eDirectory : INFO {"Source" : "eDirectory#DS","Observer" : {"Account" : {"Domain" : "MYTREE","Name" : "CN=SRV1,O=mycom"},"Entity" : {"SysAddr" : "100.1.2.164","SysName" : "SLES11-SP2-164"}},"Initiator" : {"Account" : {"Domain" : "MYTREE"},"Entity" : {"SysAddr" : "100.1.2.164:32146"}},"Target" : {"Data" : {"Name" : "OU=tmp,dc=LDAPValidate"}},"Action" : {"Event" : {"Id" : "0.0.9.5","Name" : "RECOVER_DATA_STORE","CorrelationID" : "eDirectory#12#a565474e-e320-4121-2e9a-4e4765a520e3","SubEvent" : "DSE_RESTORE_ENTRY"},"Time" : {"Offset" : 1389847715},"Log" : {"Severity" : 7},"Outcome" : "0","ExtendedOutcome" : "0"}}