C.6 PlateSpin Orchestrate Server Data Displayed in the Event Fields of the Sentinel Event Source Server

For each logging event, the PlateSpin Orchestrate Server passes a free form text log message and log event metadata to the Sentinel Event Source Server. The following table shows how the data are mapped:

Table C-1 PlateSpin Orchestrate Logged Data Mapped to Sentinel Event Source Server Fields

Sentinel Event Field Name

PlateSpin Orchestrate Data Represented

Message

A free-form text log message.

TargetServiceName

The PlateSpin Orchestrate grid name.

ReporterIP

The IP address of the PlateSpin Orchestrate Server.

TargetServiceComp

The originating facility of the PlateSpin Orchestrate event.

EventName

A name formatted as gridname: taxonomy_key. For more information, see Section C.8, Event Classification and Taxonomy Keys.

ProductName

The product is always PlateSpin Orchestrate for convenient event filtering.

  • InitUserName
  • InitUserID

The name of the PlateSpin Orchestrate user. Used for user-oriented events.

For some events, the PlateSpin Orchestrate Sentinel Collector passes some structured data related to the log event. When available, this data appears in the ExtendedInformation Sentinel Event field, which is a list of key/value pairs delimited by semicolons. Some keys are always present in ExtendedInformation, but others appear only when relevant. The following table lists these keys:

Table C-2 PlateSpin Orchestrate Key/Value Pairs Displayed in the ExtendedInformation Field of the Sentinel Event Source Server

Key

Displayed

Value

loglevel

always

The original PlateSpin Orchestrate log level, for example, NOTICE, or INFO.

eventclass

always

A symbolic identifier for this class of event, e.g. admin_login, policy_association. This also serves as the taxonomy key. Value is unclassified if the event does not contain any additional structured data.

group

when relevant

The Grid object group related to this log event.

job

when relevant

The job related to this log event.

jobinstance

when relevant

The job instance ID related to this log event.

member

when relevant

The Grid object group member related to this log event.

policy

when relevant

The policy related to this log event.

repository

when relevant

The repository related to this log event.

resource

when relevant

The resource related to this log event.

schedule

when relevant

The schedule related to this log event.

trigger

when relevant

The trigger related to this log event.

type

when relevant

The Grid object type related to this log event.

user

when relevant

The name of the user related to this log event. This key also appears in the InitUserName and InitUserID fields.

vbridge

when relevant

The Vbridge related to this log event.

vdisk

when relevant

The Vdisk related to this log event.

vm

when relevant

The VM related to this log event.

vmhost

when relevant

The VM host server related to this log event.

vnic

when relevant

The VNIC related to this log event.

target

when relevant

The name of the Grid object related to this log event.

action

when relevant

The action related to this log event.