VM Datastore I/O Monitoring

Event Type: PH_DEV_MON_VM_STATE

Description: Event containing VM CPU metrics Source: All

Key Attributes:

Name	Id	Type	Description
Event Type	eventType	string	Event type set to PH_DEV_MON_SYS_PING_STAT
Event Severity	eventSeverity	uint16	Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity)
Event Severity Category	eventSeverityCat	string	Set to Low. IN general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High
Event Receive Time	phRecvTime	Date	Time at which AccelOps generated this event
Reporting IP	reptDevIpAddr	Date	IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute)
Relaying IP	relayDevIpAddr	Date	IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address.
Raw Event Log	rawEventMsg	string	Raw event containing all attributes in comma separated “[Attribute] = value” format.
	vmName
Host name	hostName	string	Host name (as in AccelOps CMDB) of the device whose CPU utilization is being reported
Host IP Address	hostIpAddr	IP	Access IP (as in AccelOps CMDB) of the device whose CPU utilization is being reported
	phyMachName	string
	phyMachIpAddr	IP
	datastore	string
	diskReadReqPerSec	double
	diskWriteReqPerSec	double
	diskReadKBytesPerSec	double
	diskWriteKBytesPerSec	double
Poll Interval	pollIntv	uint32	Polling interval in seconds

Sample event:

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

VM Datastore Utilization Monitoring

Event Type: PH_DEV_MON_VM_DISK_UTIL

Description: Event containing VM Datastore utilization metrics Source: All

Key Attributes:

Name	Id	Type	Description
Event Type	eventType	string	Event type set to PH_DEV_MON_SYS_PING_STAT
Event Severity	eventSeverity	uint16	Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity)
Event Severity Category	eventSeverityCat	string	Set to Low. IN general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High
Event Receive Time	phRecvTime	Date	Time at which AccelOps generated this event
Reporting IP	reptDevIpAddr	Date	IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute)
Relaying IP	relayDevIpAddr	Date	IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address.
Raw Event Log	rawEventMsg	string	Raw event containing all attributes in comma separated “[Attribute] = value” format.
	vmName
Host name	hostName	string	Host name (as in AccelOps CMDB) of the device whose CPU utilization is being reported
Host IP Address	hostIpAddr	IP	Access IP (as in AccelOps CMDB) of the device whose CPU utilization is being reported
	phyMachName
	phyMachIpAddr
	datastore
	datastoreType
	diskUtil
	totalDiskMB
	freeDiskMB
	usedDiskMB
Poll Interval	pollIntv	uint32	Polling interval in seconds

Sample event:

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

VM Disk I/O Monitoring

Event Type: PH_DEV_MON_VM_DISK_IO

Description: Event containing VM Disk I/O performance metrics Source: All

Key Attributes:

Name	Id	Type	Description
Event Type	eventType	string	Event type set to PH_DEV_MON_SYS_PING_STAT
Event Severity	eventSeverity	uint16	Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity)
Event Severity Category	eventSeverityCat	string	Set to Low. IN general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High
Event Receive Time	phRecvTime	Date	Time at which AccelOps generated this event
Reporting IP	reptDevIpAddr	Date	IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute)
Relaying IP	relayDevIpAddr	Date	IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address.
Raw Event Log	rawEventMsg	string	Raw event containing all attributes in comma separated “[Attribute] = value” format.
	vmName
Host name	hostName	string	Host name (as in AccelOps CMDB) of the device whose CPU utilization is being reported
Host IP Address	hostIpAddr	IP	Access IP (as in AccelOps CMDB) of the device whose CPU utilization is being reported
	phyMachName
	phyMachIpAddr
	diskName
	datastore
	diskReadKBytesPerSec
	diskWriteKBytesPerSec
	diskReadReqPerSec
	diskWriteReqPerSec
Poll Interval	pollIntv	uint32	Polling interval in seconds

Sample event:

 

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

VM Memory Monitoring

	cpuReadyPct	double
	phyCpuUtil	double
	cpuRunPct	double
Poll Interval	pollIntv	uint32	Polling interval in seconds

Event Type: PH_DEV_MON_VM_MEM_UTIL

Description: Event containing VM Memory utilization metrics Source: All Key Attributes:

Name	Id	Type	Description
Event Type	eventType	string	Event type set to PH_DEV_MON_SYS_PING_STAT
Event Severity	eventSeverity	uint16	Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity)
Event Severity Category	eventSeverityCat	string	Set to Low. IN general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High
Event Receive Time	phRecvTime	Date	Time at which AccelOps generated this event
Reporting IP	reptDevIpAddr	Date	IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute)
Relaying IP	relayDevIpAddr	Date	IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address.
Raw Event Log	rawEventMsg	string	Raw event containing all attributes in comma separated “[Attribute] = value” format.
	vmName
Host name	hostName	string	Host name (as in AccelOps CMDB) of the device whose CPU utilization is being reported
Host IP Address	hostIpAddr	IP	Access IP (as in AccelOps CMDB) of the device whose CPU utilization is being reported
	phyMachName
	phyMachIpAddr
	phyMemUtil
	actvMemPct
	swapReadKBytesPerSec
	swapWriteKBytesPerSec
Poll Interval	pollIntv	uint32	Polling interval in seconds

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

VM Per CPU Monitoring Event

	cpuReadyPct
	phyCpuUtil
	cpuSysPct
Packet Loss Pct	pktLossPct	double	Packet loss percentage from the ping tests done during this interval
Poll Interval	pollIntv	uint32	Polling interval in seconds

Event Type: PH_DEV_MON_VM_PER_CPU_UTIL

Description: Event containing VM per CPU metrics Source: All Key Attributes:

Name	Id	Type	Description
Event Type	eventType	string	Event type set to PH_DEV_MON_SYS_PING_STAT
Event Severity	eventSeverity	uint16	Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity)
Event Severity Category	eventSeverityCat	string	Set to Low. IN general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High
Event Receive Time	phRecvTime	Date	Time at which AccelOps generated this event
Reporting IP	reptDevIpAddr	Date	IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute)
Relaying IP	relayDevIpAddr	Date	IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address.
Raw Event Log	rawEventMsg	string	Raw event containing all attributes in comma separated “[Attribute] = value” format.
	vmName
Host name	hostName	string	Host name (as in AccelOps CMDB) of the device whose CPU utilization is being reported
Host IP Address	hostIpAddr	IP	Access IP (as in AccelOps CMDB) of the device whose CPU utilization is being reported
	phyMachName
	phyMachIpAddr
	cpuName	uint32	Average Round trip time from the ping tests done during this interval
	cpuSysPct	uint32
	cpuUtil	uint32

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

VM CPU Monitoring Event

Event Type: PH_DEV_MON_VM_CPU_UTIL

Description: Event containing VM CPU metrics Source: All Key Attributes:

Name	Id	Type	Description
Event Type	eventType	string	Event type set to PH_DEV_MON_SYS_PING_STAT
Event Severity	eventSeverity	uint16	Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity)
Event Severity Category	eventSeverityCat	string	Set to Low. IN general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High
Event Receive Time	phRecvTime	Date	Time at which AccelOps generated this event
Reporting IP	reptDevIpAddr	Date	IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute)
Relaying IP	relayDevIpAddr	Date	IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address.
Raw Event Log	rawEventMsg	string	Raw event containing all attributes in comma separated “[Attribute] = value” format.
	vmName
Host name	hostName	string	Host name (as in AccelOps CMDB) of the device whose CPU utilization is being reported
Host IP Address	hostIpAddr	IP	Access IP (as in AccelOps CMDB) of the device whose CPU utilization is being reported
	phyMachName
	phyMachIpAddr
Avg Round Trip Time	processors	uint32	Average Round trip time from the ping tests done during this interval
Max Round Trip Time	vCpus	uint32	Max Round trip time from the ping tests done during this interval
Min Round Trip Time	cpuUtil	uint32	Min Round trip time from the ping tests done during this interval
	cpuRunPct
	cpuMlmtedPct

 

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

VMware Monitoring Events

AccelOps generates the following events VMware related system monitoring events

VM level events

VM State Monitoring

VM Uptime Monitoring

VM CPU Monitoring

VM Per CPU Monitoring

VM Memory Monitoring

VM Datastore Utilization Monitoring

VM Disk I/O Monitoring

VM Datastore I/O Monitoring

VM Network I/O Monitoring

Disk Growth Trend – Daily

Disk Growth Trend – Weekly

Disk Growth Trend – Monthly

ESX level events

Name	Id	Type	Description
Event Type	eventType	string	Event type set to PH_DEV_MON_SYS_PING_STAT
Event Severity	eventSeverity	uint16	Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity)
Event Severity Category	eventSeverityCat	string	Set to Low. IN general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High
Event Receive Time	phRecvTime	Date	Time at which AccelOps generated this event
Reporting IP	reptDevIpAddr	Date	IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute)
Relaying IP	relayDevIpAddr	Date	IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address.
Raw Event Log	rawEventMsg	string	Raw event containing all attributes in comma separated “[Attribute] = value” format.
VM Name	vmName
Host name	hostName	string	Host name (as in AccelOps CMDB) of the device whose CPU utilization is being reported
Host IP Address	hostIpAddr	IP	Access IP (as in AccelOps CMDB) of the device whose CPU utilization is being reported

ESX State Monitoring

ESX CPU Monitoring

ESX Memory Monitoring

ESX Datastore Utilization Monitoring

ESX Disk I/O Monitoring

ESX Datastore I/O Monitoring

Cluster and resource pool events

VM Cluster CPU Utilization

VM Cluster Memory Utilization

VM Cluster Datastore I/O Utilization

VM Resource pool CPU Utilization

VM Resource pool Memory Utilization

VM State Monitoring

Event Type: PH_DEV_MON_VM_STATE

Description: Event containing VM State Source: All Key Attributes:

Physical Machine Name	phyMachName	string
Physical machine IP	phyMachIpAddr	IP
	vmPowerState	string
	vmPowerStateCode	uint32
	vmConnectionState	string
	vmConnectionStateCode	uint32
	status	string
Poll Interval	pollIntv	uint32	Poll interval in seconds

 

Name	Id	Type	Description
Event Type	eventType	string	Event type set to PH_DEV_MON_SYS_PING_STAT
Event Severity	eventSeverity	uint16	Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity)
Event Severity Category	eventSeverityCat	string	Set to Low. IN general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High
Event Receive Time	phRecvTime	Date	Time at which AccelOps generated this event
Reporting IP	reptDevIpAddr	Date	IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute)
Relaying IP	relayDevIpAddr	Date	IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address.
Raw Event Log	rawEventMsg	string	Raw event containing all attributes in comma separated “[Attribute] = value” format.
	vmName
Host name	hostName	string	Host name (as in AccelOps CMDB) of the device whose CPU utilization is being reported
Host IP Address	hostIpAddr	IP	Access IP (as in AccelOps CMDB) of the device whose CPU utilization is being reported
	phyMachName

 

VM Uptime Monitoring

Event Type: PH_DEV_MON_VM_UPTIME

Description: Event containing VM Uptime Source: All Key Attributes:

	phyMachIpAddr
	sysUpTime
	sysDownTime
Poll Interval	pollIntv	uint32	Polling interval in seconds

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Hardware Monitoring Events

AccelOps generates the following events related to hardware monitoring

Overall Hardware Status

Individual Hardware Component Status

Temperature Measurement

Humidity Measurement

Dew point Measurement

Air flow Measurement

Audio Measurement

Ampere Measurement

Dry Contact Measurement

Camera Motion Measurement

Power Supply Measurement

Chassis Component Measurement

Overall Hardware Status Event

This event is generated by AccelOps as a overall hardware status. Sometimes this overall status is provided the device. In other times, AccelOps derives the overall health from that of the individual hardware components.

Event Type: PH_DEV_MON_HW_STAT

Description: Event containing overall hardware status as detected by AccelOps

Cisco IOS (SNMP),Cisco Nx-OS (SNMP), Juniper JunOS (SNMP), Juniper SRX JunOS (SNMP), Alcatel TiMOS (SNMP), Alcatel

AOS (SNMP),Avaya/Nortel ERS (SNMP), Huawei VRP (SNMP), H3C Comware,

EMC Clariion (NavisecCli), NetApp DataONTAP Filer (SNMP), Dell EqualLogic (SNMP)

F5 Big-IPOS (SNMP), Riverbed Steelhead (SNMP), InfoBlox NiOS (SNMP)

Virtual Machines on VMWare ESX (VMSDK), Windows/Linux Servers on Dell hardware with OpenManage installed (SNMP),

Windows/Linux Servers on HP hardware with HP Insight Manager installed (SNMP),

APC NetBotz (SNMP)

Cisco UPS (UCS API)

HP BladeSystem (SNMP)

Key Attributes: Varies depending on the source. The global set of attributes is shown below

Name	Id	Type	Description
Event Type	eventType	string	Event type set to PH_DEV_MON_HW_STAT
Event Severity	eventSeverity	uint16	0 if the event attribute hwStatusCode is 0 (Normal), 5  if hwStatusCode is 1 (Warning) and 10  if hwStatusCode is 2 (Critical)
Event Severity Category	eventSeverityCat	string	Set to Low. In general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High
Event Receive Time	phRecvTime	Date	Time at which AccelOps generated this event
Reporting IP	reptDevIpAddr	Date	IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute)
Relaying IP	relayDevIpAddr	Date	IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address.
Raw Event Log	rawEventMsg	string	Raw event containing all attributes in comma separated “[Attribute] = value” format.
Host name	hostName	string	Host name (as in AccelOps CMDB) of the device whose overall hardware health is being reported
Host IP Address	hostIpAddr	IP	Access IP (as in AccelOps CMDB) of the device whose overall hardware health is being reported
Hardware Status	hwStatusCode	uint16	Overall hardware status: 0 for Normal, 1 for Warning and 2 for Critical
Hardware Power Supply Status	hwPowerSupplyStatus	uint16	Overall hardware status: 0 for Normal, 1 for Warning and 2 for Critical
Hardware Battery Status	hwBatteryStatus	uint16	Battery status: 0 for Normal, 1 for Warning and 2 for Critical
Hardware Disk Status	hwDiskStatus	uint16	Disk status: 0 for Normal, 1 for Warning and 2 for Critical
Hardware RAID Status	hwRaidStatus	uint16	Hardware RAID status: 0 for Normal, 1 for Warning and 2 for Critical
Hot Spare Disk Count	hwHotSpareDiskCount	uint16	Number of hot spare disks
Hardware Memory Status	hwMemoryStatus	uint16	Memory status: 0 for Normal, 1 for Warning and 2 for Critical
Hardware Status	hwPowerSupplyStatus	uint16	Power supply status: 0 for Normal, 1 for Warning and 2 for Critical
Failed Power Supply Count	hwFailedPowerSupplyCount	uint16	Number of failed power supplies
Hardware Temp Sensor Status	hwTempSensorStatus	uint16	Temperature sensor status: 0 for Normal, 1 for Warning and 2 for Critical
Hardware Status	hwFanStatus	uint16	Fan status: 0 for Normal, 1 for Warning and 2 for Critical
Failed Fan Count	hwFailedFanCount	uint16	Failed fan count
Hardware Amp Status	hwAmpStatus	uint16	Current (Amp) status: 0 for Normal, 1 for Warning and 2 for Critical
Hardware Voltage Status	hwVoltageStatus	uint16	Voltage status: 0 for Normal, 1 for Warning and 2 for Critical
Storage LCC Status	hwLCCStatus	uint16	Hardware LCC status: 0 for Normal, 1 for Warning and 2 for Critical
Storage Link Status	hwLinkStatus	uint16	Hardware link status: 0 for Normal, 1 for Warning and 2 for Critical
Storage Port Status	hwPortStatus	uint16	Hardware port status: 0 for Normal, 1 for Warning and 2 for Critical
Relative Humidity Status	hwRelHumidStatus	uint16	Relative humidity status: 0 for Normal, 1 for Warning and 2 for Critical
Dew Point Status	hwDewPtStatus	uint16	Dew Point status: 0 for Normal, 1 for Warning and 2 for Critical
Audio Status	hwAudioStatus	uint16	Audio status: 0 for Normal, 1 for Warning and 2 for Critical
Air Flow Status	hwAirFlowStatus	uint16	AIr flow status: 0 for Normal, 1 for Warning and 2 for Critical
Generic Numeric Sensor Status	hwGenNumericSensorStatus	uint16	Generic Numeric sensor status: 0 for Normal, 1 for Warning and 2 for Critical
Dry Contact Status	hwDryContactStatus	uint16	Dry Contact status: 0 for Normal, 1 for Warning and 2 for Critical
Door Switch Status	hwDoorSwitchStatus	uint16	Door switch status: 0 for Normal, 1 for Warning and 2 for Critical
Camera Motion Status	hwCameraMotionStatus	uint16	Camera motion status: 0 for Normal, 1 for Warning and 2 for Critical
Generic State Sensor Status	hwGenStateSensorStatus	uint16	Generic state sensor status: 0 for Normal, 1 for Warning and 2 for Critical

The following table indicates sources of various hardware status events.

Device Type (Method)

Overall

Temp

Power Supply

Fan

Chassis

Memory

Disk

RAID

Battery

Amp

Voltage

LCC

Storage Link

Storage Port

Humidity

Air flow

Dew Point

Audio

Gen Numeric Sensor

Dry Contact

Door Swit

Cisco IOS (SNMP)

x

x

x

x

Cisco Nx-OS (SNMP)

x

x

Juniper JunOS (SNMP),

x

x

x

x

Juniper SRX JunOS (SNMP)

x

x

x

x

Alcatel TiMOS (SNMP)

x

x

x

x

Alcatel AOS (SNMP)

x

x

Huawei VRP (SNMP)

H3C Comware (SNMP)

x

x

EMC Clariion (NavisecCli)

x

x

x

x

x

x

x

c

NetApp DataONTAP Filer (SNMP)

x

x

x

x

x

x

x

x

x

Dell EqualLogic (SNMP)

x

x

x

x

x

x

F5 Big-IPOS (SNMP)

x

x

x

Riverbed Steelhead (SNMP)

x

InfoBlox NiOS (SNMP)

x

x

x

x

x

x

VMs on ESX (VMSDK)

Dell Servers

x

x

x

x

x

x

x

x

x

HP Servers

x

x

x

x

x

x

x

x

x

APC NetBotz

x

x

x

x

x

x

x

x

x

Cisco UCS

HP BladeSystem

x

x

x

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!