Configure Events


Use the Event Configuration tab to add and edit events to custom tables that capture and combine event information from various sources.

Instructions for:

Create a New Event Type

Add new events to customize your Event Type table on the Event Configuration tab. This table captures and combines events and/or traps from various sources to provide the information needed to manage your network in ExtremeCloud IQ Site Engine.

  1. Select the Alarms & Events > Event Configuration tab.
  2. Select the Menu icon () or the Add button to add an event type to the list.
  3. The Add an Event Type window opens.
  4. Enter a name for the new event type. The name can be up to 32 characters long. Spaces and special characters are not permitted. This is the name that displays in the table on the Events tab.
  5. Select one or more sources from the drop-down list.
  6. Select Save. Your new tab name now displays in the Title column of the Event Type table.

Edit an Event Type

To edit an existing Events Type:

  1. Select the Alarms & Events > Event Configuration tab.
  2. Select an event type in the table.
  3. Select the Menu icon () or the Edit button to open the Edit Event Type window for the event type you have selected.
  4. Select one or more sources for the event from the Source(s) drop-down list.
  5. You can also delete the original source after you have added at least one new source for the event.
  6. Select Save.

Delete an Event Type

To remove an Event View from the Event View panel:

  1. Select the Alarms & Events > Event Configuration tab.
  2. Select an event type in the table.
  3. Select the Menu icon () or the Delete button to delete the event you have selected in the table.
  4. Select the Save button.

Edit a Log in the Event Logs Table

To change a pattern for an Event Log in the Log Managers table, follow these steps:

  1. Select the Alarms & Events > Event Configuration tab.
  2. Navigate to the Event Logs tab. Select an Event Log in the table.
  3. Select the Menu icon () or the Edit button.
  4. Select a Pattern from the drop-down list in the Edit Event Log window to be used to interpret the information from the log file. The following pattern options are included in the Pattern drop-down list:
    • 1X Plugin Pattern - Parses files generated by other ExtremeCloud IQ Site Engine applications
    • Console 1.x Pattern - Parses files generated by Console 1.x
    • KIWI Pattern - Parses a basic KIWI Syslog Server file format
    • XIQ-SE Log Pattern - Parses files generated by Console and the other ExtremeCloud IQ Site Engine applications
    • XIQ-SE Syslog Pattern Parses files generated by the ExtremeCloud IQ Site Engine Syslog Service
    • XIQ-SE Trap Log Pattern - Parses files generated by the snmpTrapd Service
    • Red Hat LINUX Syslog Pattern - Parses files generated by the built in UNIX/LINUX Syslog Service
    • Ubuntu LINUX Syslog ISO8601/RFC3339 Pattern - Parses files generated by the ISO8601/RFC3339 UNIX/LINUX Syslog Service
    • Ubuntu LINUX Syslog Pattern - Parses files generated by the built-in UNIX/LINUX Syslog Service
    • UNIX Syslog Pattern - Parses files generated by the built in UNIX/LINUX Syslog Service
  5. Select Save to add your edited Event Log to the Log Managers table.

Add an Event Pattern to the Event Patterns Table

To add a pattern to the Events Pattern table, follow these steps:

  1. Select the Alarms & Events > Event Configuration tab.
  2. Navigate to the Event Patterns tab. Select an event pattern in the table.
  3. Select the Menu icon () or the Add button.
  4. Enter a name for the new event pattern. The name can be up to 32 characters long. Spaces and special characters are not permitted. This is the name that will appear in the table on the Events tab.
  5. Select one or more event fields from the Event Fields drop-down list.

    The following event fields are available:
    • %pri% = Priority string
    • %pdate% - Parsed Date - Console is capable of interpreting several date formats. Use this field with %ptime% for most standard date/time formats. If this does not present the date correctly, use the following fields to parse the individual elements in the date.
    • %date% - parses date elements and places the parsed information into the Date/Time column.
    • %month%, %day%, %year% - separately parsed date elements. The parsed results are placed in the Date/Time column.
    • %ptime% - Parsed Time - Console is capable of interpreting several time formats. Use this field with %pdate% for most standard date/time formats. If this does not present the time correctly, use separate fields to parse the individual elements in the time.
    • %time% - parses the time elements and places the parsed information into the Date/Time column.
    • %hour%, %min%, %sec%, %ampm% - separately parsed time elements. The parsed results are placed in the Date/Time column.
    • %cat% - Category provides a means for sorting events (e.g., Poller, Application, Error)
    • %sev% - Severity
    • %user% - Username associated with the event.
    • %ip% - Host IP Address associated with the event.
    • %type% - Type (Event or Trap)
    • %event% - a more specific keyword/phrase (i.e. "Contact Lost", "Contact Established")
    • %info% - The information string.
    • %discard% - information that is not used. This is information that is skipped over to parse the next piece.
  6. Select one or more delimiters from the Delimiters drop-down list.

    The following delimiters are available:
    • \r - return
    • \t - tab
    • \n - new line
    • \w - whitespace
    • , - comma
    • . - period
    • : = colon
    • ; - semicolon
    • - - dash
  7. Select Save to add your new event pattern to the Event Patterns table.

For information on related help topics: