nnmincidentcfg.format — file containing incident configurations that can be loaded into the NNMi database. This file format is created by
nnmincidentcfgdump.ovpl
and loaded into the database by
nnmincidentcfgload.ovpl
The nnmincidentcfg.format
file contains NNMi incident configurations that can be loaded into the NNMi database. This file uses a required set of tags to identify its content.
Each configuration must start with one of the following configuration type tags that identify the five possible incident configuration types.
*ConfigurationType=MgmtEventConfig *ConfigurationType=PairwiseConfig *ConfigurationType=SnmpTrapConfig *ConfigurationType=SyslogMessageConfig
When editing the incident configurations, note the following:
*The pound sign (#) denote comments. *All comments must appear before the configuration type tag. *If a pound sign (#) appears within the configuration data, it is treated as part of the current tag’s value. *Comments are not saved in the NNMi database. Therefore, they do not appear in the output from a subsequent nnmincidentdump.ovpl command. *All tags that appear after a configuration type tag are considered to be part of the configuration for that incident configuration type. *You can modify any tag that begins with a dash (-). *You cannot modify any tags that begin with an asterisk (*) after they have been imported for the first time. *(OPTIONAL) denotes that a tag is optional. *Brackets ([]) indicate that the tag value must comply with a specified format or list of valid values. *Tags that are annotated with the text “(Direct child tags may occur multiple times)” are a placeholder for a list of child configuration tags. *The UUID tag is optional. UUIDs are used by NNMi as unique database identifiers. Do not define UUIDs in a configuration file. *NNMi creates Label tags if you do not provide them. *Tags that require a Key/Label result in a validation error under the following circumstances: *You do not provide either the Key and Label value. *NNMi is unable to determine the Label from the Key value provided.
Note the following exception: NNMi assigns “Customer” as the Author Key and Label value for any incident configuration that is changed.
Before loading an nnmincidentcfg.format file, try the following recommended process:
1. Use the nnmincidentcfgdump.ovpl command with the –name option to select an example incident configuration that is the type of incident you want to edit. 2. Examine the output so that you can identify the tag hierarchy. 3. After you are familiar with the file format, locate the incident configuration type in the list of examples below, determine the type of change you want to make, and insert the information where is it required. 4. Validate your changes using thennmincidentcfgload.ovpl -validate
command. 5. Test your changes by loading the file into the NNMi database using thennmincidentcfgload.ovpl -import
command.
NOTE: The nnmincidentcfgload.ovpl command generates errors for those values that do not match the required format.
NNMi provides example configuration files and a description of the valid formats in the following directory:
Windows:UNIX:
install_dir
\examples\nnm\incidentcfg/opt/OV/examples/nnm/incidentcfg
Create a management event configuration using only the required tags:
*ConfigurationType=MgmtEventConfig *Name MinimnalistMgmtConfig *Oid .1.3.6.1.4.1.11.2.17.19.2.0.9999 -Author -Key com.customer.author -Category -Key com.hp.nms.incident.category.Fault -Family -Key com.hp.nms.incident.family.Node -MessageFormat Custom message format -Severity MINOR
Add an enrichment configuration to the management event incident:
*ConfigurationType=MgmtEventConfig *Name MinimnalistMgmtConfig *Oid .1.3.6.1.4.1.11.2.17.19.2.0.9999 -Author -Key com.customer.author -Category -Key com.hp.nms.incident.category.Fault -Family -Key com.hp.nms.incident.family.Node -MessageFormat Custom message format -EnrichConfiguration -Enable true -Enrichments -Enrichment -PayloadFilter -Expression ciaName notEquals "varArg"
Configure a syslog message incident configuration that has comments before the configuration type tag:
# # Insert comments before the configuration type tag # # NNMi does not store comments in the NNMi database # # This example includes only the required tabs for the syslog message configuration # *ConfigurationType=SyslogMessageConfig *Name MinimalistSyslogConfig -Author -Key com.minimal.customer -Label MinimalCustomer -Category -Key com.hp.nms.incident.category.Fault -Family -Key com.hp.nms.incident.family.AggregatePort -MessageFormat $.1.3.6.1.4.1.11937.1.54.5: $.1.3.6.1.4.1.11937.1.4 -Severity CRITICAL
The following example contains the valid format for PairwiseConfig
configuration types.
*ConfigurationType=PairwiseConfig (ROOT TAG) *Name -SetOfPairItems (OPTIONAL TAG) (Direct child tags may occur multiple times) -SetOfPairItem (OPTIONAL TAG) -FirstInPair -FirstParamType -SecondInPair -SecondParamType *UUID (OPTIONAL TAG) -Author -Key -Label (OPTIONAL TAG) -DeleteWhenClosed (OPTIONAL TAG) -Description (OPTIONAL TAG) -Duration -Enable (OPTIONAL TAG) -FirstIncidentConfigRef -Key -Type = [MgmtEventConfig, SnmpTrapConfig, SyslogMessageConfig] -FirstIncidentName -FirstIncidentPayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -SecondIncidentConfigRef -Key -Type = [MgmtEventConfig, SnmpTrapConfig, SyslogMessageConfig] -SecondIncidentName -SecondIncidentPayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG)
The following example contains the valid format for MgmtEventConfig
configuration types.
*ConfigurationType=MgmtEventConfig (ROOT TAG) *Name *Oid -Author -Key -Label (OPTIONAL TAG) -Category -Key -Label (OPTIONAL TAG) -Enable (OPTIONAL TAG) -ActionConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Actions (OPTIONAL TAG) (Direct child tags may occur multiple times) -Action (OPTIONAL TAG) -Command (OPTIONAL TAG) -CommandType -LifecycleState = [Registered, InProgress, Completed, Closed, Dampened] *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -DampenConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) -HourInterval -MinuteInterval -SecondInterval *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -DedupConfiguration (OPTIONAL TAG) -ComparisonCriteria -CorrelationIncidentConfig (OPTIONAL TAG) *Name -DedupCount (OPTIONAL TAG) -Enable (OPTIONAL TAG) -HourInterval (OPTIONAL TAG) -MinuteInterval (OPTIONAL TAG) -SecondInterval (OPTIONAL TAG) *UUID (OPTIONAL TAG) -ComparisonParamList (OPTIONAL TAG) (Direct child tags may occur multiple times) -ComparisonParam (OPTIONAL TAG) -ParamType (OPTIONAL TAG) -ParamValue *UUID (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family -Key -Label (OPTIONAL TAG) -MessageFormat -Severity -EnrichConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Enrichments (OPTIONAL TAG) (Direct child tags may occur multiple times) -Enrichment (OPTIONAL TAG) -AssignedTo (OPTIONAL TAG) -Category (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -MessageFormat (OPTIONAL TAG) -Nature (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Priority (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -EnrichCias (OPTIONAL TAG) (Direct child tags may occur multiple times) -EnrichCia (OPTIONAL TAG) -CiaName -EnrichCiaType -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Severity (OPTIONAL TAG) -SuppressConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -InterfaceGroups (OPTIONAL TAG) (Direct child tags may occur multiple times) -InterfaceGroup (OPTIONAL TAG) -Enable *UUID (OPTIONAL TAG) -DampenConfiguration -Enable (OPTIONAL TAG) -HourInterval -MinuteInterval -SecondInterval *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -EnrichConfiguration -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Enrichments (OPTIONAL TAG) (Direct child tags may occur multiple times) -Enrichment (OPTIONAL TAG) -AssignedTo (OPTIONAL TAG) -Category (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -MessageFormat (OPTIONAL TAG) -Nature (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Priority (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -EnrichCias (OPTIONAL TAG) (Direct child tags may occur multiple times) -EnrichCia (OPTIONAL TAG) -CiaName -EnrichCiaType -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Severity (OPTIONAL TAG) *InterfaceGroup -Ordering -ActionConfiguration -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Actions (OPTIONAL TAG) (Direct child tags may occur multiple times) -Action (OPTIONAL TAG) -Command (OPTIONAL TAG) -CommandType -LifecycleState = [Registered, InProgress, Completed, Closed, Dampened] *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -SuppressConfiguration -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -NodeGroups (OPTIONAL TAG) (Direct child tags may occur multiple times) -NodeGroup (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -DampenConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) -HourInterval -MinuteInterval -SecondInterval *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -EnrichConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Enrichments (OPTIONAL TAG) (Direct child tags may occur multiple times) -Enrichment (OPTIONAL TAG) -AssignedTo (OPTIONAL TAG) -Category (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -MessageFormat (OPTIONAL TAG) -Nature (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Priority (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -EnrichCias (OPTIONAL TAG) (Direct child tags may occur multiple times) -EnrichCia (OPTIONAL TAG) -CiaName -EnrichCiaType -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Severity (OPTIONAL TAG) -FlowDefinitions (OPTIONAL TAG) (Direct child tags may occur multiple times) -FlowDefinition (OPTIONAL TAG) -Enable (OPTIONAL TAG) *FlowDefinition -LifecycleState -Key -Label (OPTIONAL TAG) *UUID (OPTIONAL TAG) *NodeGroup -Ordering -ActionConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Actions (OPTIONAL TAG) (Direct child tags may occur multiple times) -Action (OPTIONAL TAG) -Command (OPTIONAL TAG) -CommandType -LifecycleState = [Registered, InProgress, Completed, Closed, Dampened] *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -SuppressConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -RateConfiguration (OPTIONAL TAG) -ComparisonCriteria -CorrelationIncidentConfig (OPTIONAL TAG) *Name -Enable (OPTIONAL TAG) -HourInterval (OPTIONAL TAG) -MinuteInterval (OPTIONAL TAG) -RateCount (OPTIONAL TAG) -SecondInterval (OPTIONAL TAG) *UUID (OPTIONAL TAG) -ComparisonParamList (OPTIONAL TAG) (Direct child tags may occur multiple times) -ComparisonParam (OPTIONAL TAG) -ParamType (OPTIONAL TAG) -ParamValue *UUID (OPTIONAL TAG)
The following example contains the valid format for SnmpTrapConfig
configuration types.
*ConfigurationType=SnmpTrapConfig (ROOT TAG) *Name *Oid -Author -Key -Label (OPTIONAL TAG) -Category -Key -Label (OPTIONAL TAG) -Enable (OPTIONAL TAG) -ActionConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Actions (OPTIONAL TAG) (Direct child tags may occur multiple times) -Action (OPTIONAL TAG) -Command (OPTIONAL TAG) -CommandType -LifecycleState = [Registered, InProgress, Completed, Closed, Dampened] *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -DampenConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) -HourInterval -MinuteInterval -SecondInterval *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -DedupConfiguration (OPTIONAL TAG) -ComparisonCriteria -CorrelationIncidentConfig (OPTIONAL TAG) *Name -DedupCount (OPTIONAL TAG) -Enable (OPTIONAL TAG) -HourInterval (OPTIONAL TAG) -MinuteInterval (OPTIONAL TAG) -SecondInterval (OPTIONAL TAG) *UUID (OPTIONAL TAG) -ComparisonParamList (OPTIONAL TAG) (Direct child tags may occur multiple times) -ComparisonParam (OPTIONAL TAG) -ParamType (OPTIONAL TAG) -ParamValue *UUID (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family -Key -Label (OPTIONAL TAG) -GeoCentralForwardConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -MessageFormat -Severity -EnrichConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Enrichments (OPTIONAL TAG) (Direct child tags may occur multiple times) -Enrichment (OPTIONAL TAG) -AssignedTo (OPTIONAL TAG) -Category (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -MessageFormat (OPTIONAL TAG) -Nature (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Priority (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -EnrichCias (OPTIONAL TAG) (Direct child tags may occur multiple times) -EnrichCia (OPTIONAL TAG) -CiaName -EnrichCiaType -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Severity (OPTIONAL TAG) -SuppressConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -InterfaceGroups (OPTIONAL TAG) (Direct child tags may occur multiple times) -InterfaceGroup (OPTIONAL TAG) -Enable *UUID (OPTIONAL TAG) -DampenConfiguration -Enable (OPTIONAL TAG) -HourInterval -MinuteInterval -SecondInterval *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -EnrichConfiguration -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Enrichments (OPTIONAL TAG) (Direct child tags may occur multiple times) -Enrichment (OPTIONAL TAG) -AssignedTo (OPTIONAL TAG) -Category (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -MessageFormat (OPTIONAL TAG) -Nature (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Priority (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -EnrichCias (OPTIONAL TAG) (Direct child tags may occur multiple times) -EnrichCia (OPTIONAL TAG) -CiaName -EnrichCiaType -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Severity (OPTIONAL TAG) *InterfaceGroup -Ordering -ActionConfiguration -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Actions (OPTIONAL TAG) (Direct child tags may occur multiple times) -Action (OPTIONAL TAG) -Command (OPTIONAL TAG) -CommandType -LifecycleState = [Registered, InProgress, Completed, Closed, Dampened] *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -SuppressConfiguration -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -NodeGroups (OPTIONAL TAG) (Direct child tags may occur multiple times) -NodeGroup (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -DampenConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) -HourInterval -MinuteInterval -SecondInterval *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -EnrichConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Enrichments (OPTIONAL TAG) (Direct child tags may occur multiple times) -Enrichment (OPTIONAL TAG) -AssignedTo (OPTIONAL TAG) -Category (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -MessageFormat (OPTIONAL TAG) -Nature (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Priority (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -EnrichCias (OPTIONAL TAG) (Direct child tags may occur multiple times) -EnrichCia (OPTIONAL TAG) -CiaName -EnrichCiaType -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Severity (OPTIONAL TAG) -FlowDefinitions (OPTIONAL TAG) (Direct child tags may occur multiple times) -FlowDefinition (OPTIONAL TAG) -Enable (OPTIONAL TAG) *FlowDefinition -LifecycleState -Key -Label (OPTIONAL TAG) *UUID (OPTIONAL TAG) *NodeGroup -Ordering -ActionConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Actions (OPTIONAL TAG) (Direct child tags may occur multiple times) -Action (OPTIONAL TAG) -Command (OPTIONAL TAG) -CommandType -LifecycleState = [Registered, InProgress, Completed, Closed, Dampened] *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -SuppressConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -RateConfiguration (OPTIONAL TAG) -ComparisonCriteria -CorrelationIncidentConfig (OPTIONAL TAG) *Name -Enable (OPTIONAL TAG) -HourInterval (OPTIONAL TAG) -MinuteInterval (OPTIONAL TAG) -RateCount (OPTIONAL TAG) -SecondInterval (OPTIONAL TAG) *UUID (OPTIONAL TAG) -ComparisonParamList (OPTIONAL TAG) (Direct child tags may occur multiple times) -ComparisonParam (OPTIONAL TAG) -ParamType (OPTIONAL TAG) -ParamValue *UUID (OPTIONAL TAG) -UserRootCause (OPTIONAL TAG)
The following example contains the valid format for SyslogMessageConfig
configuration types.
*ConfigurationType=SyslogMessageConfig (ROOT TAG) *Name -Author -Key -Label (OPTIONAL TAG) -Category -Key -Label (OPTIONAL TAG) -Enable (OPTIONAL TAG) -ActionConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Actions (OPTIONAL TAG) (Direct child tags may occur multiple times) -Action (OPTIONAL TAG) -Command (OPTIONAL TAG) -CommandType -LifecycleState = [Registered, InProgress, Completed, Closed, Dampened] *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -DampenConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) -HourInterval -MinuteInterval -SecondInterval *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -DedupConfiguration (OPTIONAL TAG) -ComparisonCriteria -CorrelationIncidentConfig (OPTIONAL TAG) *Name -DedupCount (OPTIONAL TAG) -Enable (OPTIONAL TAG) -HourInterval (OPTIONAL TAG) -MinuteInterval (OPTIONAL TAG) -SecondInterval (OPTIONAL TAG) *UUID (OPTIONAL TAG) -ComparisonParamList (OPTIONAL TAG) (Direct child tags may occur multiple times) -ComparisonParam (OPTIONAL TAG) -ParamType (OPTIONAL TAG) -ParamValue *UUID (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family -Key -Label (OPTIONAL TAG) -GeoCentralForwardConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -MessageFormat -Severity -EnrichConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Enrichments (OPTIONAL TAG) (Direct child tags may occur multiple times) -Enrichment (OPTIONAL TAG) -AssignedTo (OPTIONAL TAG) -Category (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -MessageFormat (OPTIONAL TAG) -Nature (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Priority (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -EnrichCias (OPTIONAL TAG) (Direct child tags may occur multiple times) -EnrichCia (OPTIONAL TAG) -CiaName -EnrichCiaType -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Severity (OPTIONAL TAG) -SuppressConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -InterfaceGroups (OPTIONAL TAG) (Direct child tags may occur multiple times) -InterfaceGroup (OPTIONAL TAG) -Enable *UUID (OPTIONAL TAG) -DampenConfiguration -Enable (OPTIONAL TAG) -HourInterval -MinuteInterval -SecondInterval *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -EnrichConfiguration -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Enrichments (OPTIONAL TAG) (Direct child tags may occur multiple times) -Enrichment (OPTIONAL TAG) -AssignedTo (OPTIONAL TAG) -Category (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -MessageFormat (OPTIONAL TAG) -Nature (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Priority (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -EnrichCias (OPTIONAL TAG) (Direct child tags may occur multiple times) -EnrichCia (OPTIONAL TAG) -CiaName -EnrichCiaType -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Severity (OPTIONAL TAG) *InterfaceGroup -Ordering -ActionConfiguration -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Actions (OPTIONAL TAG) (Direct child tags may occur multiple times) -Action (OPTIONAL TAG) -Command (OPTIONAL TAG) -CommandType -LifecycleState = [Registered, InProgress, Completed, Closed, Dampened] *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -SuppressConfiguration -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -NodeGroups (OPTIONAL TAG) (Direct child tags may occur multiple times) -NodeGroup (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -DampenConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) -HourInterval -MinuteInterval -SecondInterval *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -EnrichConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Enrichments (OPTIONAL TAG) (Direct child tags may occur multiple times) -Enrichment (OPTIONAL TAG) -AssignedTo (OPTIONAL TAG) -Category (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -Description (OPTIONAL TAG) -Family (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -MessageFormat (OPTIONAL TAG) -Nature (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Priority (OPTIONAL TAG) -Key -Label (OPTIONAL TAG) -EnrichCias (OPTIONAL TAG) (Direct child tags may occur multiple times) -EnrichCia (OPTIONAL TAG) -CiaName -EnrichCiaType -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -Severity (OPTIONAL TAG) -FlowDefinitions (OPTIONAL TAG) (Direct child tags may occur multiple times) -FlowDefinition (OPTIONAL TAG) -Enable (OPTIONAL TAG) *FlowDefinition -LifecycleState -Key -Label (OPTIONAL TAG) *UUID (OPTIONAL TAG) *NodeGroup -Ordering -ActionConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -Actions (OPTIONAL TAG) (Direct child tags may occur multiple times) -Action (OPTIONAL TAG) -Command (OPTIONAL TAG) -CommandType -LifecycleState = [Registered, InProgress, Completed, Closed, Dampened] *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -SuppressConfiguration (OPTIONAL TAG) -Enable (OPTIONAL TAG) *UUID (OPTIONAL TAG) -PayloadFilter (OPTIONAL TAG) -Expression [Format = Formatted Expression String] *UUID (OPTIONAL TAG) -RateConfiguration (OPTIONAL TAG) -ComparisonCriteria -CorrelationIncidentConfig (OPTIONAL TAG) *Name -Enable (OPTIONAL TAG) -HourInterval (OPTIONAL TAG) -MinuteInterval (OPTIONAL TAG) -RateCount (OPTIONAL TAG) -SecondInterval (OPTIONAL TAG) *UUID (OPTIONAL TAG) -ComparisonParamList (OPTIONAL TAG) (Direct child tags may occur multiple times) -ComparisonParam (OPTIONAL TAG) -ParamType (OPTIONAL TAG) -ParamValue *UUID (OPTIONAL TAG) -UserRootCause (OPTIONAL TAG)