Use the Event Browser (HTML)

Opens a list from which you can select one of the available views.

On the first load of the Event Browser (HTML) no view is selected. Once you have selected a view, that view is preselected when you reopen the Event Browser (HTML).

If you have appropriate permissions, you can deselect the view by selecting <No view>.

The five most recent selections are displayed at the top of the list.

Enables you to select one of the available event filters. You can deselect the filter by selecting <No event filter>. The five most recent selections are displayed at the top of the list.

Once you have selected a filter, that filter is preselected when the Event Browser is reopened.

Manage event filters: Opens the Event Filters side panel, enabling you to select the event filter that you want to apply.

From the Event Filters side panel, you can also create an event filter, edit, duplicate, preview matching events, or delete an existing event filter.

For more information about event filters, see Event Filters.

Show Event Details: Toggles the visibility of the Event Details (HTML) side panel. Alternatively, you can double-click an event to open the Event Details (HTML) side panel.

Options: Opens the Options side panel for the current Event Browser (HTML) tab. You can modify and set display options (for example, to hide or display columns, change the display order of the columns, or color the event lines). For more information, see How to manage columns and How to configure the display of events.

Open menu: Opens the event context panel for the event. Hover over an event to show this icon.

Open details in new window: Opens the Event Details in a new window. Hover over an event to show this icon.

Automatic Action: Indicates if an automatic action is attached to the event and describes its status using the following icons:

— Automatic action available for event

— Automatic action is running

— Automatic action executed successfully

— Automatic action failed to execute successfully

Correlation: Indicates if the event has any related events that are hidden as a result of a correlation. The following icons indicate the event's position in a chain of events:

— Event is a cause in a correlation

— Event is a cause in one correlation and a symptom in another

— Event is a symptom in a correlation

For details about correlated events, see Related Events.

Duplicate Count: Indicates how many duplicate events exist.

Instructions: Indicates if the event contains any instructions.

Instructions are configured in the policy that generates the event and might include, for example, details describing automatic and operator-initiated actions, or manual steps to follow for problem resolution.

Annotations: Indicates how many annotations the event has. Annotations are comments or observations relating to the associated (or a similar) event.

For more information about annotations, see Annotations.

Owned in HPOM: Indicates whether the event is owned by an Operations Manager user. If the event is owned by an OM user, the user name is displayed with the prefix OM:, for example, OM:Database Operator in the User column.

Control Transferred: Indicates if the responsibility for the associated event was transferred to an external manager.

User Action: Indicates if a user action is attached to the event and describes its status using the following icons:

— User action available for event

— Automatic action is running

— User action executed successfully

— User action failed to execute successfully

Application that caused the event to occur.

Name of the logical group to which the event belongs (for example, Database, Security, or Network). Event categories help simplify the process of deciding to which user or user group an event type should be assigned for investigation. An event category is similar in concept to a message group in OM.

Configuration item type associated with the event.

A default custom attribute that is configured in the Available Custom Attributes infrastructure setting (in Administration > Setup and Maintenance > Infrastructure Settings > Applications > Operations Management > Operations Management - Custom Attribute Settings).

Host system where the event occurred.

Optional information about the event in addition to the event's original title and the text captured from the event source.

Event Type Indicator: Display name of the event type indicator (ETI) and the current state, (for example, Web application state: Slow).

WebAppState is the name of the event type indicator. The corresponding label is Web application state, which is shown in the General tab. The state of the current ETI value is Slow.

If event type indicators are assigned (see the Source Info tab) but are not being resolved (event type indicator field in General tab is empty), the configuration must be corrected.

Time elapsed since the event was created. The event age is updated when the data in the Event Browser (HTML) is automatically synchronized with the database every minute or when the Event Browser (HTML) is manually refreshed.

ID of the event assigned by the external manager.

Assigned Group: Name of the group to which the event is assigned.

ID of the event. Same as the ID of the message in OM if it is forwarded to OMi.

Host system where the event occurred.

Information used to identify node CI. For example, the hostname in OM used to find host in the RTSM:

• DNS name of the originating server.

• Node ID of the originating server.

Device such as a computer, printer, or modem.

Management server that initially forwarded the original event along the chain of servers configured in a flexible management environment.

Priority: Priority assigned to the event. The following icons indicate the event priority:

— Highest

— High

— Medium

— Low

— Lowest

Name of the impaired configuration item where the event occurred.

If the Related CI includes a subcomponent, it is displayed as follows: Related CI: Subcomponent. For example, Server1: CPU1.

Last server in the OM flexible management chain that forwarded the event to OMi.

Severity: Severity assigned to the event. Usually, this is the same as the severity status of the original event, for example if the event is received from OM. The following icons indicate the event severity status:

— Critical

— Major

— Minor

— Warning

— Normal

— Unknown

Text field used to document solutions to help operators solve the problem indicated by the event.

Node where the monitoring agent or probe is running that generated the event.

Information used to identify the source CI.

Lifecycle State: Position of the event in a defined lifecycle. A lifecycle is a complete series of predefined states that summarizes the event's life. The following icons indicate the lifecycle state:

— Open

— In Progress

— Resolved

— Closed

To change an event's lifecycle status, select the event, and select one of the status buttons in the Event Details (HTML) side panel or in the event context panel.

Name of the logical subgroup (category) to which the event belongs (for example, Oracle (database), Accounts (security), or Routers (network)).

Date and time when the event was created.

Date and time when OMi first received notification of the event.

Date and time when the (last duplicate) event was received.

Time Lifecycle State Changed: Date and time when the last lifecycle state change took place.

Brief summary of the event.

Type of message in OM. String used to organize different types of events within an event category or subcategory.

Assigned User: Name of the network user who is responsible for solving the event's underlying problem. For example, if the event is owned by an OMi user, the user name is displayed. If the event is owned by an OM user, the user name is displayed with the prefix OM:, for example, OM:Database Operator.

Opens the Event Details in a pop-up window and displays all available information about the event.

Sets the lifecycle status to Open. The event can now be assigned to users for investigation and resolution.

Sets the lifecycle status to In Progress, indicating that the underlying problems of the event is under investigation.

Sets the lifecycle status to Resolved.

Sets the lifecycle status to Closed.

Sets the lifecycle status to Closed and resets the associated HI value to the default value for the selected event and on all symptom events of the selected event that are not already closed.

Opens the Severity sub menu for the selected event, enabling you to change the severity. The following icons indicate event severity status:

— Critical

— Major

— Minor

— Warning

— Normal

— Unknown

Opens the Priority sub menu for the selected event, enabling you to change the priority. The following icons indicate the event priority:

— Highest

— High

— Medium

— Low

— Lowest

Opens the Change Assignments dialog box, enabling you to assign the selected event to a specific group or user. The following icons indicate the event assignment type:

— Assigned group

— Assigned user

You can hover over the assignment tile and click Edit to change the assignment.

Lists the related, node, and source CIs for the selected event. You can click the CIs to see additional information about the CI, including KPIs, and the total number of events related to this CI. Additionally, you can investigate and work with the CR by choosing from a number of actions.

The related CI is the name of the impaired configuration item where the event occurred.
The node CI is the name of the host system where the event occurred.
The source CI is the node where the monitoring agent or probe is running that generated the selected event.

CIs >

Displays the count and the highest severity of open events associated with the selected CI.
You can click the button to open a new Event Browser window that displays these events.

Lists the KPIs that are assigned to the selected CI. In addition, each KPI's status, business rule, value, and the date when the status last changed is displayed.

Opens a new window with a list of the health indicators associated with the CI's CI type.

Lists the last four recently used actions. This option is only displayed if an action was executed before.

Opens a new window displaying a CI Change Report for the selected CI.

Opens a new window displaying a KPI Over Time report for the selected CI. You can decide to view the business impact over the last month, week, or day.

Opens a new window displaying a Business Impact report for the selected CI. You can decide to view the business impact over the last month, week, or day.

Opens a new window displaying a list of the health indicators associated with the CI's CI type.

Opens a new window displaying a list of the visible and hidden child CIs and the number of unassigned and unresolved events that the child CI is related to.

Opens a new window displaying all the CIs associated with the view selected from the drop-down list, their status, number of unassigned events, and number of unresolved events.

Opens a new window that displays the properties of the selected CI.

Opens a new Event Browser window that displays events associated with the selected CI only.

Opens a new Event Browser window that displays closed events associated with the selected CI, in a specific range of time in the past.

If available, displays performance dashboards for the selected CI in a new window.

Select to open either the View Mappings UI or the Tools UI. For details, see the description for Configure > View Mappings, or Configure > Tools below.

Indicates if an automatic action is attached to the event and describes its status using the following icons:

— Automatic action available for event

— Automatic action is running

— Automatic action executed successfully

— Automatic action failed to execute successfully

Click Start to launch an automatic action. For more details, see Actions.

Indicates if a user action is attached to the event and describes its status using the following icons:

— User action available for event

— User action is running

— User action executed successfully

— User action failed to execute successfully

Opens the Run Tool wizard. You can select a tool from a list of those configured for the CI type associated with the selected event or events. Note that you cannot launch URL tools when selecting multiple events, as this would open multiple browser windows.

Opens the Create Annotation dialog box for the selected event. The annotation is associated with the selected event.

For more information about annotations, see Annotations.

Opens the Create Custom Attribute dialog box for the selected event. The custom attribute is associated with the selected event on saving.

For more information about custom attributes, see Custom Attributes.

Manually recalculates the priority for the selected event.

If the Business Criticality was changed for one or more CIs related to events in the Event Browser (HTML), a recalculation assigns new priority values for these events.

Opens the Indicator Definitions UI in a new window. You need the appropriate authorization to access the Indicator Definitions UI and other Administration features.

Opens the View Mappings UI with the event's related CI preselected. You need the appropriate authorization to access the View Mappings UI and other Administration features.

Opens the Policy Management UI in a new window. You need the appropriate authorization to access the Policy Management UI and other Administration features.

Opens the Policy Editor UI in a new window, enabling you to edit policy templates. Only the policies present in the Monitoring Automation policy inventory can be opened for editing.

For information on how to deploy policy templates, see Policy Templates.

Opens the Tools UI in a new window. You need the appropriate authorization to access the Tools UI and other Administration features.

Opens the Assignments and Tuning UI in a new window by using the CI ID of the related CI, which results in a list of all assignments for that particular CI. For more information, see Assignments and Tuning.

If available, opens the OMi Performance Dashboard page in a new window. The OMi Performance Dashboard page enables you to create and configure a performance dashboard. For more information, see Performance Pane.

Opens the Run Books menu from which you can select a Run Book from a list of those configured for the CI type associated with the selected event.

Shows a list from which you can select a tool of those configured for the CI type associated with the selected event.

Opens the Custom Actions sub menu from which you can select a custom action from a list of those configured for the CI type associated with the selected event.

Opens the event in the source manager user interface.

Forwards the selected event to a configured external manager application. Used when the operator is not able to solve the problem and needs to escalate the issue, for example by creating a Service Manager incident. The external manager can be configured to return an incident ID to OMi as forwarding information.

The title of the event. Hover over the title and click Edit to edit the selected event's title.

Sets the lifecycle status to Open. The event can now be assigned to users for investigation and resolution.

Sets the lifecycle status to In Progress, indicating that the underlying problems of the event is under investigation.

Sets the lifecycle status to Resolved.

Sets the lifecycle status to Closed.

Sets the lifecycle status to Closed and resets the associated HI value to the default value for the selected event and on all symptom events of the selected event that are not already closed.

Opens the Severity sub menu for the selected event, enabling you to change the severity. The following icons indicate event severity status:

— Critical

— Major

— Minor

— Warning

— Normal

— Unknown

Opens the Priority sub menu for the selected event, enabling you to change the priority. The following icons indicate the event priority:

— Highest

— High

— Medium

— Low

— Lowest

Name of the logical group to which the event belongs (for example, Database, Security, or Network). Event categories help simplify the process of deciding to which user or user group an event type should be assigned for investigation.

Name of the logical subgroup (category) to which the event belongs (for example, Oracle (database), Accounts (security), or Routers (network)).

Opens the Change Assignments dialog box, enabling you to assign the selected event to a specific group or user. The following icons indicate the event assignment type:

— Assigned group

— Assigned user

To change the assignment, hover over the assignment tile and click Edit.

Optional information about the event in addition to the event's original title and the text captured from the event source. To create or edit the description, hover over the description tile and click Edit.

Lists the related, node, and source configuration items (CIs) for the selected event. You can click the CIs to view the full names of the configuration items.

The related CI is the name of the impaired configuration item where the event occurred.
The node CI is the name of the host system where the event occurred.
The source CI is the node where the monitoring agent or probe is running that generated the selected event.

CIs >

Displays the count of events originating from the selected CI, and the latest severity of the events associated with the CI.
You can click the button to open a list of the events in the Event Browser.

Lists the KPIs that are assigned to the selected CI. In addition, each KPI's status, business rule, value, and the date when the status last changed is displayed.

Opens a new window with a list of the health indicators associated with the CI's CI type.

Lists the last four recently used actions. This option is only displayed if an action was executed before.

Opens a new window displaying a CI Change Report for the selected CI.

Opens a new window displaying a KPI Over Time report for the selected CI. You can decide to view the business impact over the last month, week, or day.

Opens a new window displaying a Business Impact report for the selected CI. You can decide to view the business impact over the last month, week, or day.

Opens a new window displaying a list of the health indicators associated with the CI's CI type.

Opens a new window displaying a list of the visible and hidden child CIs and the number of unassigned and unresolved events that the child CI is related to.

Opens a new window displaying all the CIs associated with the view selected from the drop-down list, their status, number of unassigned events, and number of unresolved events.

Opens a new window that displays the properties of the selected CI.

Opens a new Event Browser window that displays events associated with the selected CI only.

Opens a new Event Browser window that displays closed events associated with the selected CI, in a specific range of time in the past.

If available, displays performance dashboards for the selected CI in a new window.

Opens the View Mappings UI with the event's related CI preselected. You need the appropriate authorization to access the View Mappings UI and other Administration features.

Opens the Tools UI in a new window. You need the appropriate authorization to access the Tools UI and other Administration features.

Display name of the event type indicator (ETI) and the current state, (for example, Web application state: Slow).

WebAppState is the name of the event type indicator. The corresponding label is Web application state. The state of the current ETI value is Slow.

Opens the Instructions sub menu for the selected event, enabling you to view the details describing automatic and operator-initiated actions, or manual steps to follow for problem resolution.

Indicates if an automatic action is attached to the event and describes its status using the following icons:

— Automatic action available for event

— Automatic action is running

— Automatic action executed successfully

— Automatic action failed to execute successfully

Click Start to launch an automatic action. For more details, see Actions.

Indicates if a user action is attached to the event and describes its status using the following icons:

— User action available for event

— User action is running

— User action executed successfully

— User action failed to execute successfully

Displays the annotations of the selected event. To add new annotations, click Create Annotation. The annotation is associated with the selected event on saving. To edit or delete annotations you created, click their entry in the list to open the Edit Annotation dialog box.

For more information about annotations, see Annotations.

Displays the custom attributes of the selected event. To add new custom attributes, click Create Custom Attribute. The custom attribute is associated with the selected event on saving. To edit or delete custom attributes you created, click their entry in the list to open the Edit Custom Attribute dialog box.

For more information about custom attributes, see Custom Attributes.

Displays additional details about the event, including the event ID and type, the count of duplicate events, source information about the originating and sending server, forwarding information, and resolver hints.

Displays an overview of the information relating to the identification of the source CI of the received event.

• Original ID — Unique ID assigned to the original message by the message policy that generated the message.

• Original data — Original event text as captured from Operations Agents before being formatted into an OMi message.

• Match Information — Displays details of the policy that the event matched.

• Originating Server — DNS name and IP address of the management server that forwarded the original OM event along the chain of servers configured in a flexible management environment.
• Sending Server — DNS name and IP address of the last server in the OM flexible management chain that forwarded the event to OMi.

Displays the information relating to the identification of the node, source CI, related CI, and the ETI of the received event.

• Related CI Hint — Event information used to identify the CI related to the event.

• HPOM Service ID — Service ID used to identify the service related to the event.

• Matched Hints Count — Number of identified hints that matched the selected CI in the RTSM database. This value is presented as a proportion of the number of available identifiers extracted from the event.

• Status — Provides information about the matches used for related CI resolution, and displays information about the match: Success confirms a successful match and displays the hint used. Unsuccessful CI resolution displays the hint that could not be resolved or indicates that no hint was available to assess. Confirms that a match was not possible and indicates the action taken, for example, Fallback to host.

• ETI Hint — Used to identify the ETI for each CI. If ETI Resolution is successful, the ETI is assumed to be assigned to the CI, and this CI is given a higher match rating.

• Node Hint — Hostname used to find a node in the RTSM.

• DNS Name, IP Address, and Core ID — DNS name, IP address, and ID of the originating system.

• Source CI Hint — Description of an OMi event attribute used to find the CI in the RTSM.

The Forwarding Info is available for events for which ownership was transferred to an external manager.

• External ID — ID assigned to the event by the external manager. The link opens the event in the external application that is responsible for managing the event.

• Server — Node on which the external manager is hosted.

• DNS Name — DNS name of the node on which the external manager is hosted.

• Type — Specifies how an event forwarded to a certain server is handled. The options include:

  • Notify — Target server receives original events but no further updates
  • Notify and Update — Target server receives original events and all further updates
  • Synchronize — Target server receives original events and all further updates and sends back all updates

  • Synchronize and Transfer Control — Target server receives original events and updates and sends back all updates. Ownership of the event is transferred to the other server. Only OMi users with special permission are allowed to close the event after control is transferred, for example, an Administrator.

    This option is available only if Enable synchronize and transfer control is enabled on the selected connected server. An operator may manually transfer control via the context menu of the Event Browser.

• State — Status of the Transfer Control request. The possible states are:

  • Cancel Requested — For a transfer control request that is still in the queue for processing, a request was made to cancel the transfer of control.

  • Forwarded — Control of the selected event was transferred to the selected external server.

  • Queued — Request to transfer control of the selected event is in the queue for processing.

• Rule — Forwarding rule used to transfer control of an event to an external application.

• Queue Identifier — User who transferred control of an event to an external application.

• Show Details in External Application — Opens the event in the external application that is responsible for managing the event.

Opens the Event Details in a pop-up window and displays all available information about the event.

Displays information for events for which ownership was transferred to an external manager. For example, if your organization uses HPE Service Manager as a central service desk, you can transfer control of events from the Event Browser to HPE Service Manager. This is often the case when the OMi operator is not able to solve the problem and needs to assign the problem to an expert. HPE Service Manager creates an incident and returns the Incident ID to OMi. This is displayed in the Forwarding tab with additional information about the event available from the external manager.

Information displayed includes the current state in the controlling service and the control transfer state. You can stop a pending transfer request by clicking Cancel transfer control.