Administer > NNMi Incidents > Concepts for Incidents > Custom Incident Attributes > CIAs Added to Closed Management Event Incidents

CIAs Added to Closed Management Event Incidents

When the NNMi Causal Engine determines that the conditions that caused a management event incident no longer apply, NNMi sets that incident’s lifecycle state to CLOSED and adds the CIAs listed in the following table to the incident. NNMi console users can see this information in the Correlation Notes field of the Incident form. Lifecycle transition actions can use the values of the CIAs directly.

Custom Incident Attributes for a Closed Incident

Name

Description

cia.reasonClosed

The reason that NNMi cancelled or closed the incident. This reason is also the conclusion name, for example NodeUp or InterfaceUp.

If this field is not set, an NNMi console user closed the incident.

To determine the NNMi expected values of the cia.reasonClosed CIA, see How NNMi Closes Incidents in the NNMi help.

cia.incidentDurationMs

The duration, in milliseconds, of the outage, as measured by NNMi from when the status goes down and comes back up. This value is the difference of the cia.timeIncidentDetectedMs and cia.timeIncidentResolvedMs CIAs. It is a more accurate measurement than comparing the timestamps of down and up incidents.

cia.timeIncidentDetectedMs

The timestamp, in milliseconds, when the NNMi Causal Engine first detected the problem.

cia.timeIncidentResolvedMs

The timestamp, in milliseconds, when the NNMi Causal Engine detected that the problem has been resolved.

NNMi adds the CIAs listed in the previous table to most primary and secondary root cause incidents. For example, a NodeDown incident can have InterfaceDown and AddressDown incidents as secondary root causes. When NNMi closes the NodeDown incident, NNMi also closes the secondary incidents and adds the CIAs with values for each incident context to the secondary incidents.

NNMi does not add the CIAs listed in the previous table to the following default management event incident types:

  • Incidents that an NNMi console user closes manually
  • Incidents that NNMi closes in response to an object being deleted from the NNMi database
  • IslandGroupDown incidents
  • NnmClusterFailover, NnmClusterLostStandby, NnmClusterStartup, and NnmClusterTransfer incidents

  • Incidents in the following families:

    • Correlation
    • License
    • NNMi Health
    • Trap Analysis

Send Help Center feedback