Previous Topic: Naming Warning ActionNext Topic: Agent Disable Action


Agent Alert Action

The Agent Alert action expresses information about alert conditions related to an Agent that reports to an Infrastructure manager or similar centralized system component. An agent refers to any software or hardware component that is managed by a manager component. Any type of alert about the agent can be mapped to this action. If this is an error condition and does not warrant immediate attention, then map to the Agent Error action. Do not map to CEG fields that start with agent_ as these are related to CA User Activity Reporting Module Agents.

Information

Level

Source - User Information

Tertiary

Source - Host Information

Tertiary

Source - Object Information

Tertiary

Source - Process Information

Tertiary

Source - Group Information

Tertiary

Dest - User Information

Tertiary

Dest - Host Information

Primary

Dest - Object Information

Secondary

Dest - Group Information

Tertiary

Agent - Information

Primary

Agent - Host Information

Primary

Event Source - Host Information

Primary

Event Source - Information

Tertiary

Event - Information

Primary

Result - Information

Primary

Result

event_result

event_severity

Success

n/a

n/a

Failure

F

6