The Agent Error action expresses information about error conditions related to an Agent that reports to an Infrastructure manager or similar centralized system component. An agent refers to any software or hardware component that is managed by a manager component. Any type of error about the agent can be mapped to this action. Less severe events should be mapped to the Agent Warning action. More severe events that warrant immediate action should be mapped to the Agent Alert action. Do not map to CEG fields that start with agent_ as these are related to CA User Activity Reporting Module Agents.
|
Information |
Level |
|---|---|
|
Source - User Information |
Tertiary |
|
Source - Host Information |
Tertiary |
|
Source - Object Information |
Tertiary |
|
Source - Process Information |
Tertiary |
|
Source - Group Information |
Tertiary |
|
Dest - User Information |
Tertiary |
|
Dest - Host Information |
Primary |
|
Dest - Object Information |
Secondary |
|
Dest - Group Information |
Tertiary |
|
Agent - Information |
Primary |
|
Agent - Host Information |
Primary |
|
Event Source - Host Information |
Primary |
|
Event Source - Information |
Tertiary |
|
Event - Information |
Primary |
|
Result - Information |
Primary |
|
Result |
event_result |
event_severity |
|---|---|---|
|
Success |
n/a |
n/a |
|
Failure |
F |
5 |
|
Copyright © 2013 CA.
All rights reserved.
|
|