5.9 Exceptional Events

Exceptional events are generated very rarely, and are considered important because they are generated. For instance, shutting down an enterprise-critical server is exceptional because it can’t happen without someone's permission.

Table 5-9 Exceptional Event Taxonomy

Event Name

Event Identifier

Corresponding eDir Event

Description

Use

Start System

0.0.9.0

DSE_AGENT_OPEN_LOCAL

DSE_RELOAD_DS

Start a system

This event is reported when a server, system, or mission-critical application starts up.

Shutdown System

0.0.9.1

DSE_AGENT_CLOSE_LOCAL

Shutdown a system

This event is reported when a server, system, or mission-critical application shuts down.

Back up Data Store

0.0.9.6

DSE_BACKUP_ENTRY

Back up Data Store

This event is reported when a server, system, or mission critical application backs up a critical data store.

Recover Data Store

0.0.9.7

DSE_RESTORE_ENTRY

Recover Data Store

This event is reported when a server, system, or mission critical application restores a critical data store.

5.9.1 Examples for Exceptional Events

The following sections include example for exceptional events.

Start System

Click Start System to generate an event when a server, system, or mission-critical application starts, as shown in the following example:

Jan 08 16:18:58 eDirectory : INFO {"Source" : "eDirectory#DS","Observer" : {"Account" : {"Domain" : "GMC1-OESMARA","Name" : "CN=SLES11-SP3-191,O=novell"},"Entity" : {"SysAddr" : "164.99.179.191","SysName" : "sles11-sp3-191"}},"Initiator" : {"Account" : {"Domain" : "GMC1-OESMARA","Name" : "CN=SLES11-SP3-191,O=novell"},"Entity" : {"SysAddr" : "0.0.0.0:0"}},"Action" : {"Event" : {"Id" : "0.0.9.0","Name" : "START_SYSTEM","CorrelationID" : "eDirectory#0#","SubEvent" : "DSE_AGENT_OPEN_LOCAL"},"Time" : {"Offset" : 1390474138},"Log" : {"Severity" : 7},"Outcome" : "0","ExtendedOutcome" : "0"}}

Shutdown System

Click Shutdown System to generate an event when a server, system, or mission-critical application shuts down, as shown in the following example:

Jan 08 16:18:47 eDirectory : INFO {"Source" : "eDirectory#DS","Observer" : {"Account" : {"Domain" : "GMC1-OESMARA","Name" : "CN=SLES11-SP3-191,O=novell"},"Entity" : {"SysAddr" : "164.99.179.191","SysName" : "sles11-sp3-191"}},"Initiator" : {"Account" : {"Domain" : "GMC1-OESMARA","Name" : "CN=SLES11-SP3-191,O=novell"},"Entity" : {"SysAddr" : "0.0.0.0:0"}},"Action" : {"Event" : {"Id" : "0.0.9.1","Name" : "SHUTDOWN_SYSTEM","CorrelationID" : "eDirectory#0#","SubEvent" : "DSE_AGENT_CLOSE_LOCAL"},"Time" : {"Offset" : 1390474127},"Log" : {"Severity" : 7},"Outcome" : "0","ExtendedOutcome" : "0"}}

Recover Data Store

Click Recover Data Store to generate an event when a server, system, or mission-critical application recovers a data store, as shown in the following example:

Jan 08 10:18:35 eDirectory : INFO {"Source" : "eDirectory#DS","Observer" : {"Account" : {"Domain" : "MYTREE","Name" : "CN=SRV1,O=mycom"},"Entity" : {"SysAddr" : "100.1.2.164","SysName" : "SLES11-SP2-164"}},"Initiator" : {"Account" : {"Domain" : "MYTREE"},"Entity" : {"SysAddr" : "100.1.2.164:32146"}},"Target" : {"Data" : {"Name" : "OU=tmp,dc=LDAPValidate"}},"Action" : {"Event" : {"Id" : "0.0.9.5","Name" : "RECOVER_DATA_STORE","CorrelationID" : "eDirectory#12#a565474e-e320-4121-2e9a-4e4765a520e3","SubEvent" : "DSE_RESTORE_ENTRY"},"Time" : {"Offset" : 1389847715},"Log" : {"Severity" : 7},"Outcome" : "0","ExtendedOutcome" : "0"}}