Skip to main content

GET /events/monitors

Use this method to return information about all enabled and disabled event forwarders.

Authentication

Authentication with username and password is required.

Request URL

GET https://{management_server_IP}/events/monitors

Query parameters

None

Request body

None

Response codes

CodeDescriptionComments
200OKThe request completed successfully.
400Bad RequestA query parameter or request attribute is missing or not valid, or the operation is not supported. A descriptive error message is returned in the response body.
401UnauthorizedThe user cannot be authenticated. Authentication has not been provided or has failed. A descriptive error message is returned in the response body.
500Internal Server ErrorAn internal error occurred. A descriptive error message is returned in the response body.

Response body

The attributes that are returned vary depending on the type of recipient to which events are forwarded.
Table 1. Azure Log Analytics.
AttributesTypeDescription
createdByStringName of the user that created the event forwarder
descriptionStringDescription for the event forwarder
enableBooleanIndicates whether the event forwarder is enabled. This can be one of the following values.
  • true. (default) The event forwarder is enabled.

  • false. The event forwarder is disabled.

eventFilterObjectInformation about the types of events to forward
 filterObjectInformation about each event filter
  categoriesArray of stringsEvent categories. This can be one or more of the following values.
  • BULLETIN. Sends notification about new bulletins.
  • GENERAL. Sends notifications about audit events, based on the selected event classes and severities
  • STATUS_CHANGE. Sends notifications about changes in status.
  • STATUS_UPDATE
  • WARRANTY. Send notifications about warranties.
  componentIDsArray of stringsList of component IDs. If empty, all components are accepted.
  eventIDStringList of event IDs, separated by a comma, to be included
  eventServicesArray of stringsService type. This can be one or both of the following values.
  • none
  • support
  • user
  excludedEventIDsStringList of event IDs, separated by a comma, to be excluded
  negateFilterBooleanIndicates whether to exclude events that match the specified filter. This can be one of the following values.
  • true. Excludes (does not forward) events that match the specified filters.

  • false. Includes (forwards) events that match the specified filters.

  resourceGroupsUUIDsArray of stringsList of resource
  sourceIDsArray of stringsList of source IDs. If empty, all sources are monitored.
  typeSeverityArray of objectsEvent severity and type.

If both sourceIDs and componentsIDs are empty, all events that match the typeSeverity filter are forwarded.

   severityStringEvent severity. This can be one of the following values.
  • Unknown. The severity is unknown.
  • Informational. Informational
  • Warning. User can decide if action is needed.
  • Minor. Action is needed, but the situation is not serious at this time.
  • Major. Action is needed now.
  • Critical. Action is needed now and the scope is broad (perhaps an imminent outage to a critical resource will result).
  • Fatal. A non-recoverable error has occurred.
   typeStringEvent type. This can be one of the following values.
  • Unknown
  • Audit
  • Cooling
  • Power
  • Disks. Storage
  • Memory
  • Processor
  • System. Rack or tower server
  • Test
  • Adaptor. Adapter card
  • Expansion. Expansion board
  • IOModule. Flex System switch
  • Blade. Flex System server
  • Switch
  • Other
  • Backplane
  • Chassis
  • Drive
  • ExtDrive. External drive
  • Fan
  • M2Adapter
  • M2Drive
  • OCP
  • PCIE
  • PSU
  • Retimer
  • Riser
  • 7MMDrive
  • Pump
forwardHiddenBooleanSpecifies whether to forward hidden events. This can be one of the following values.
  • true. Hidden events are forwarded.
  • false. (default) Hidden events are not forwarded.
idStringEvent forwarder ID
ignoreExcludedBooleanSpecifies whether to disable the forwarding of excluded events. This can be one of the following values.
  • true. Ignores excluded events.

  • false. (default) Forwards excluded events.

ipAddressStringIPv4 or IPv6 address or hostname of the remote system that is the target to receive the events. For email, this is the SMTP server.
lastEditByStringName of the user that last edited the event forwarder
matchEverythingBooleanIndicates whether the action is to be run against all managed devices. This can be one of the following values.
  • true. The action is to be run against all managed devices.

  • false. The action is run against only the managed device that is specified by the target attribute.

nameStringUser-defined name for the event forwarder. This name must be unique for all event forwarder.
outputFormatStringOutput format of the forwarded event

Text between double square brackets are the fields that which are replaced with actual values. For a description of each field, use GET /events/monitors?format=formatKeys.

portStringTCP/UDP port used for the connection. For Azure Log Analytics, this value is always 443.
primaryKeyStringPrimary key of the log-analytics device that is obtained from the Azure portal.
protocolStringType of event forwarder. For Azure Log Analytics, this value is always oms_log_analytics.
requestTimeoutIntegerAmount of time, in seconds, that an event forwarder has to forward events before the request times out.

By default, the time-out value is 30 seconds.

schedulerObjectInformation about times and days when you want the specified events to be forwarded to this event forwarder
 enabledBooleanIndicates whether the schedule is enabled. This can be one of the following values.
  • true. The schedule is enabled. Only events that occur during the specified time slot are forwarded.

  • false. The schedule is disabled. Events are forwarded 24x7.

 eventsArray of objectsList of event-fowarding schedules
   calendarStringSchedule name
   daysOfWeekArray of stringsDays of the week. This can be one or more of the following values.
  • 1. Monday

  • 2. Tuesday

  • 3. Wednesday

  • 4. Thursday

  • 5. Friday

  • 6. Saturday

  • 7. Sunday

   endingDateStringDate when the schedule ends
   endTimeStringTime when the schedule ends
   idIntegerSchedule ID
   initialEndTimeString 
   initialStartTimeString 
   repeatableBooleanIndicates whether the schedule is recurring. This can be one of the following values.
  • true. The schedule is recurring.

  • false. The schedule occurs only once.

   seriesIdIntegerSchedule index
   startingDateStringDate when the schedule starts
   startTimeStringTime when the schedule starts
   summaryBoolean 
 showSummaryStringIndicates whether the schedule summary is enabled. The summary includes the time slot for schedule and which schedules are repeatable. This can be one of the following values.
  • true. The schedule summary is enabled.

  • false. The schedule summary is disabled.

workspaceIDStringWorkspace ID of the log-analytics device that is obtained from the Azure portal.
The following example is returned if the request is successful for event forwarders to Azure Log Analytics.
[{
"createdBy": "ADMIN",
"description": "",
"enable": "true",
"eventFilter": {
"filter": {
"categories": ["WARRANTY", "GENERAL"],
"componentIDs": [],
"eventID": "",
"eventServices": [],
"excludedEventIDs": "",
"negateFilter": false,
"resourceGroupsUUIDs": [],
"sourceIDs": [],
"typeSeverity": [{
"severity": "INFORMATIONAL",
"type": "AUDIT"
},
...,
{
"severity": "FATAL",
"type": "AUDIT"
}]
}
},
"forwardHidden": false,
"id": "1520009819404",
"ignoreExcluded": false,
"ipAddress": "3268497b-7842-4a00-a9b8-8128e125e916.ods.opinsights.azure.com",
"lastEditBy": "ADMIN",
"matchEverything": true,
"name": "ALA_forwarder",
"outputFormat": "{\"Msg\":\"[[EventMessage]]\",\"EventID\":\"[[EventID]]\",
\"Serialnum\":\"[[EventSerialNumber]]\",\"SenderUUID\":\"[[EventSenderUUID]]\",
\"Flags\":\"[[EventFlags]]\",\"Userid\":\"[[EventUserName]]\",
\"LocalLogID\":\"[[EventLocalLogID]]\",\"DeviceName\":\"[[DeviceFullPathName]]\",
\"SystemName\":\"[[SystemName]]\",\"Action\":\"[[EventAction]]\",
\"FailFRUs\":\"[[EventFailFRUs]]\",\"Severity\":\"[[EventSeverity]]\",
\"SourceID\":\"[[EventSourceUUID]]\",
\"SourceLogSequence\":[[EventSourceLogSequenceNumber]],
\"FailSNs\":\"[[EventFailSerialNumbers]]\",
\"FailFRUUUIDs\":\"[[EventFailFRUUUIDs]]\",\"EventClass\":\"[[EventClass]]\",
\"ComponentID\":\"[[EventComponentUUID]]\",\"Mtm\":\"[[EventMachineTypeModel]]\",
\"MsgID\":\"[[EventMessageID]]\",\"SequenceNumber\":\"[[EventSequenceID]]\",
\"TimeStamp\":\"[[EventTimeStamp]]\",\"Args\":[[EventMessageArguments]],
\"Service\":\"[[EventService]]\",\"CommonEventID\":\"[[CommonEventID]]\",
\"EventDate\":\"[[EventDate]]\",\"EventSource\":\"[[EventSource]]\",
\"DeviceSerialNumber\":\"[[DeviceSerialNumber]]\",
\"DeviceIPAddress\":\"[[DeviceIPAddress]]\",\"LXCA\":\"[[LXCA_IP]]\"}",
"port": "58443",
"primaryKey": "BA7qbCEy7tsTVJ0S3LMATXKXeoHrdPvOx4CfzcnsgM3qKYjZgph64oIKWH9FuSO1xakjmasW0VGeNAUiGSomuQ==",
"protocol": "oms_log_analytics",
"requestTimeout": 30,
"scheduler": {
"showSummary": false,
"enabled": false,
"events": []
},
"workspaceID": "3268497b-7842-4a00-a9b8-8128e125e916"
}]
Table 2. Email service using SMTP.
AttributesTypeDescription
authenticationEmailStringAuthentication type. This can be one of the following values.
  • Regular. Authenticates to the specified SMTP server using the specified user ID and password.

  • NTLM. Uses the NT LAN Manager (NTLM) protocol to authentication to the specified SMTP server using the specified user ID, password, and domain name.

  • OAUTH2. Uses the Simple Authentication and Security Layer (SASL) protocol to authenticate to the specified SMTP server using the specified user name and security token. Typically, the user name is your email address.

    Attention
    The security token expires after a short time. It is your responsibility to refresh the security token.
  • None. No authentication is used.

connectionEmailArray of stringsConnection type to secure connection to the SMTP server. This can be one of the following values.
  • SSL. Use the SSL protocol while communicating.

  • TLS. Uses TLS to form a secure communication over an unsecure channel.

createdByStringName of the user that created the event forwarder
descriptionStringDescription for the event forwarder.
enableBooleanIndicates whether the event forwarder is enabled. This can be one of the following values.
  • true. (default) The event forwarder is enabled.

  • false. The event forwarder is disabled.

eventFilterObjectInformation about the types of events to forward
 filterObjectInformation about each event filter
  categoriesArray of stringsEvent categories. This can be one or more of the following values.
  • BULLETIN. Sends notification about new bulletins.
  • GENERAL. Sends notifications about audit events, based on the selected event classes and severities
  • STATUS_CHANGE. Sends notifications about changes in status.
  • STATUS_UPDATE
  • WARRANTY. Send notifications about warranties.
  componentIDsArray of stringsList of component IDs. If empty, all components are accepted.
  eventIDStringList of event IDs, separated by a comma, to be included
  eventServicesArray of stringsService type. This can be one or both of the following values.
  • none
  • support
  • user
  excludedEventIDsStringList of event IDs, separated by a comma, to be excluded
  negateFilterBooleanIndicates whether to exclude events that match the specified filter. This can be one of the following values.
  • true. Excludes (does not forward) events that match the specified filters.

  • false. Includes (forwards) events that match the specified filters.

  resourceGroupsUUIDsArray of stringsList of resource
  sourceIDsArray of stringsList of source IDs. If empty, all sources are monitored.
  typeSeverityArray of objectsEvent severity and type

If both sourceIDs and componentsIDs are empty, all events that match the typeSeverity filter are forwarded.

   severityStringEvent severity. This can be one of the following values.
  • Unknown. The severity is unknown.
  • Informational. Informational
  • Warning. User can decide if action is needed.
  • Minor. Action is needed, but the situation is not serious at this time.
  • Major. Action is needed now.
  • Critical. Action is needed now and the scope is broad (perhaps an imminent outage to a critical resource will result).
  • Fatal. A non-recoverable error has occurred.
   typeStringEvent type. This can be one of the following values.
  • Unknown
  • Audit
  • Cooling
  • Power
  • Disks. Storage
  • Memory
  • Processor
  • System. Rack or tower server
  • Test
  • Adaptor. Adapter card
  • Expansion. Expansion board
  • IOModule. Flex System switch
  • Blade. Flex System server
  • Switch
  • Other
  • Backplane
  • Chassis
  • Drive
  • ExtDrive. External drive
  • Fan
  • M2Adapter
  • M2Drive
  • OCP
  • PCIE
  • PSU
  • Retimer
  • Riser
  • 7MMDrive
  • Pump
forwardHiddenBooleanSpecifies whether to forward hidden events. This can be one of the following values.
  • true. Hidden events are forwarded.
  • false. (default) Hidden events are not forwarded.
idStringEvent forwarder ID
ignoreExcludedBooleanSpecifies whether to disable the forwarding of excluded events. This can be one of the following values.
  • true. Ignores excluded events.

  • false. (default) Forwards excluded events.

ipAddressStringIPv4 or IPv6 address or hostname of the remote system that is the target to receive the events. For email, this is the SMTP server.
lastEditByStringName of the user that last edited the event forwarder
matchEverythingBooleanIndicates whether the action is to be run against all managed devices. This can be one of the following values.
  • true. The action is to be run against all managed devices.

  • false. The action is run against only the managed device that is specified by the target attribute.

nameStringUser-defined name for the event forwarder. This name must be unique for all event forwarder.
outputFormatStringOutput format of the forwarded event

Text between double square brackets are the fields that which are replaced with actual values. For a description of each field, use GET /events/monitors?format=formatKeys.

portStringTCP/UDP port used for the connection. For email, this value is always 25.
protocolStringType of event forwarder. For email, this value is always email_alert.
recipientsArray of stringsList of email addresses for the event forwarder, in the format userid@domain (for example, XClarity1@company.com)
requestTimeoutIntegerThe amount of time, in seconds, that an event forwarder has to forward events before the request times out.

By default, the time-out value is 30 seconds.

schedulerObjectInformation about times and days when you want the specified events to be forwarded to this event forwarder recipient
 enabledBooleanIndicates whether the schedule is enabled. This can be one of the following values.
  • true. The schedule is enabled. Only events that occur during the specified time slot are forwarded.

  • false. The schedule is disabled. Events are forwarded 24x7.

 eventsArray of objectsList of event-fowarding schedules
   calendarStringSchedule name
   daysOfWeekArray of stringsDays of the week. This can be one or more of the following values.
  • 1. Monday

  • 2. Tuesday

  • 3. Wednesday

  • 4. Thursday

  • 5. Friday

  • 6. Saturday

  • 7. Sunday

   endingDateStringDate when the schedule ends
   endTimeStringTime when the schedule ends
   idIntegerSchedule ID
   initialEndTimeString 
   initialStartTimeString 
   repeatableBooleanIndicates whether the schedule is recurring. This can be one of the following values.
  • true. The schedule is recurring.

  • false. The schedule occurs only once.

   seriesIdIntegerSchedule index
   startingDateStringDate when the schedule starts
   startTimeStringTime when the schedule starts
   summaryBoolean 
 showSummaryStringIndicates whether the schedule summary is enabled. The summary includes the time slot for schedule and which schedules are repeatable. This can be one of the following values.
  • true. The schedule summary is enabled.

  • false. The schedule summary is disabled.

senderDomainStringSender domain (for example, company.com)

If you do not specify the senderDomain or senderUserName, this is LXCA.{source_identifier}@{smtp_host} by default.

If you specify the senderDomain but not senderUserName, the format of the sender address is {LXCA_host_name}@{sender_domain} (for example, XClarity1@company.com).

senderUserNameStringSender name
subjectFormatStringEmail subject

For a description of fields that can be specified in the subject format, use GET /events/monitors?format=defaultFormat.

useSupportContactBooleanIndicates to use the email address that is defined for the support contact that is assigned to the device. This can be one of the following values.
  • true. Email forwarder uses the email address for the support contact.

  • false. (default) Email forwarder uses the email addresses that are specified in the recipients attribute.

The following example is returned if the request is successful for event forwarders to email services.
[{
"authenticationEmail": "none",
"connectionEmail": ["SSL"],
"createdBy": "ADMIN",
"description": "",
"enable": "true",
"eventFilter": {
"filter": {
"categories": ["WARRANTY","STATUS_CHANGE","STATUS_UPDATE","GENERAL"],
"componentIDs": [],
"eventID": "",
"eventServices": ["none","support","user"],
"excludedEventIDs": "",
"negateFilter": false,
"sourceIDs": [],
"resourceGroupsUUIDs": [],
"typeSeverity": [{
"severity": "INFORMATIONAL",
"type": "UNKNOWN"
},
{
"severity": "WARNING",
"type": "UNKNOWN"
},
{
"severity": "MINOR",
"type": "UNKNOWN"
},
...,
{
"severity": "FATAL",
"type": "AUDIT"
}]
}
},
"forwardHidden": false,
"id": "1520009765759",
"ignoreExcluded": false,
"ipAddress": "192.0.2.20",
"lastEditBy": "ADMIN",
"matchEverything": true,
"name": "email forwarder",
"outputFormat": "Alert: [[EventDate]] [[EventMessage]]\n
\n
Hardware Information:\n
Managed Endpoint : [[DeviceHardwareType]] at [[DeviceIPAddress]]\n
Device name : [[DeviceName]]\n
Product name : [[DeviceProductName]]\n
Host name : [[DeviceHostName]]\n
Machine Type : [[DeviceMachineType]]\n
Machine Model : [[DeviceMachineModel]]\n
Serial Number : [[DeviceSerialNumber]]\n
DeviceHealthStatus : [[DeviceHealthStatus]]\n
IPv4 addresses : [[DeviceIPV4Addresses]]\n
IPv6 addresses : [[DeviceIPV6Addresses]]\n
Chassis : [[DeviceChassisName]]\n
DeviceBays : [[DeviceBays]]\n
\n
LXCA is: [[ManagementServerIP]]\n
\n
Event Information:\n
Event ID : [[EventID]]\n
Common Event ID : [[CommonEventID]]\n
EventSeverity : [[EventSeverity]]\n
Event Class : [[EventClass]]\n
Sequence ID : [[EventSequenceID]]\n
Event Source ID : [[EventSourceUUID]]\n
Component ID : [[EventComponentUUID]]\n
Serial Num : [[EventSerialNumber]]\n
MTM : [[EventMachineTypeModel]]\n
EventService : [[EventService]]\n
Console link : [[ConsoleLink]]\n
iOS link : [[iOSLink]]\n
Android link : [[AndroidLink]]\n
System Name : [[DeviceFullPathName]]
\n",
"port": "25",
"protocol": "email_alert",
"recipients": "user1@company.com",
"requestTimeout": 30,
"scheduler": {
"enabled": false,
"events": [],
"showSummary": false
},
"senderDomain": "company.com",
"senderUserName": "LXCA1",
"subjectFormat": "[[DeviceName]]-[[EventMessage]]",
"useSupportContact": false
}]
Table 3. FTP servers.
AttributesTypeDescription
authUserBooleanAuthentication user ID if authentication is used
characterEncodingStringCharacter set. This can be one of the following values.
  • UTF-8. (default)

  • Big5

charactersToRemoveStringSequence of characters to be removed from the file content
createdByStringName of the user that created the event forwarder
descriptionStringDescription for the event forwarder
enableBooleanIndicates whether the event forwarder is enabled. This can be one of the following values.
  • true. (default) The event forwarder is enabled.

  • false. The event forwarder is disabled.

eventFilterObjectInformation about the types of events to forward
 filterObjectInformation about each event filter
  categoriesArray of stringsEvent categories. This can be one or more of the following values.
  • BULLETIN. Sends notification about new bulletins.
  • GENERAL. Sends notifications about audit events, based on the selected event classes and severities
  • STATUS_CHANGE. Sends notifications about changes in status.
  • STATUS_UPDATE
  • WARRANTY. Send notifications about warranties.
  componentIDsArray of stringsList of component IDs. If empty, all components are accepted.
  eventIDStringList of event IDs, separated by a comma, to be included
  eventServicesArray of stringsService type. This can be one or both of the following values.
  • none
  • support
  • user
  excludedEventIDsStringList of event IDs, separated by a comma, to be excluded
  negateFilterBooleanIndicates whether to exclude events that match the specified filter. This can be one of the following values.
  • true. Excludes (does not forward) events that match the specified filters.

  • false. Includes (forwards) events that match the specified filters.

  resourceGroupsUUIDsArray of stringsList of resource
  sourceIDsArray of stringsList of source IDs. If empty, all sources are monitored.
  typeSeverityArray of objectsEvent severity and type.

If both sourceIDs and componentsIDs are empty, all events that match the typeSeverity filter are forwarded.

   severityStringEvent severity. This can be one of the following values.
  • Unknown. The severity is unknown.
  • Informational. Informational
  • Warning. User can decide if action is needed.
  • Minor. Action is needed, but the situation is not serious at this time.
  • Major. Action is needed now.
  • Critical. Action is needed now and the scope is broad (perhaps an imminent outage to a critical resource will result).
  • Fatal. A non-recoverable error has occurred.
   typeStringEvent type. This can be one of the following values.
  • Unknown
  • Audit
  • Cooling
  • Power
  • Disks. Storage
  • Memory
  • Processor
  • System. Rack or tower server
  • Test
  • Adaptor. Adapter card
  • Expansion. Expansion board
  • IOModule. Flex System switch
  • Blade. Flex System server
  • Switch
  • Other
  • Backplane
  • Chassis
  • Drive
  • ExtDrive. External drive
  • Fan
  • M2Adapter
  • M2Drive
  • OCP
  • PCIE
  • PSU
  • Retimer
  • Riser
  • 7MMDrive
  • Pump
forwardHiddenBooleanSpecifies whether to forward hidden events. This can be one of the following values.
  • true. Hidden events are forwarded.
  • false. (default) Hidden events are not forwarded.
ftpAuthenticationStringAuthentication type. This can be one of the following values.
  • Regular. Authenticates to the specified SMTP server using the specified user ID and password. This is the same as basic authentication.

  • None. (default) No authentication is used. This is the same as anonymous authentication.

ftpFileNameStringFile-name format to use for the file that contains the forwarded event. The default format is event_[[EventSequenceID]].txt.
Note
Each file contains information for a single event.
ftpPathStringPath on the remote FTP server where the file is to be uploaded
idStringEvent forwarder ID
ignoreExcludedBooleanSpecifies whether to disable the forwarding of excluded events. This can be one of the following values.
  • true. Ignores excluded events.

  • false. (default) Forwards excluded events.

ipAddressStringIPv4 or IPv6 address or hostname of the remote system that is the target to receive the events. For email, this is the SMTP server.
lastEditByStringName of the user that last edited the event forwarder
matchEverythingBooleanIndicates whether the action is to be run against all managed devices. This can be one of the following values.
  • true. The action is to be run against all managed devices.

  • false. The action is run against only the managed device that is specified by the target attribute.

nameStringUser-defined name for the event forwarder. This name must be unique for all event forwarders.
outputFormatStringOutput format of the forwarded event

Text between double square brackets are the fields that which are replaced with actual values. For a description of each field, use GET /events/monitors?format=formatKeys.

portStringTCP/UDP port used for the connection. For FTP, this value is always 21.
protocolStringType of event forwarder. For FTP, this value is always ftp.
requestTimeoutIntegerAmount of time, in seconds, that an event forwarder has to forward events before the request times out

By default, the time-out value is 30 seconds.

schedulerObjectInformation about times and days when you want the specified events to be forwarded to this event forwarder
 enabledBooleanIndicates whether the schedule is enabled. This can be one of the following values.
  • true. The schedule is enabled. Only events that occur during the specified time slot are forwarded.

  • false. The schedule is disabled. Events are forwarded 24x7.

 eventsArray of objectsList of event-forwarding schedules
   calendarStringSchedule name
   daysOfWeekArray of stringsDays of the week. This can be one or more of the following values.
  • 1. Monday

  • 2. Tuesday

  • 3. Wednesday

  • 4. Thursday

  • 5. Friday

  • 6. Saturday

  • 7. Sunday

   endingDateStringDate when the schedule ends
   endTimeStringTime when the schedule ends
   idIntegerSchedule ID
   initialEndTimeString 
   initialStartTimeString 
   repeatableBooleanIndicates whether the schedule is recurring. This can be one of the following values.
  • true. The schedule is recurring.

  • false. The schedule occurs only once.

   seriesIdIntegerSchedule index
   startingDateStringDate when the schedule starts
   startTimeStringTime when the schedule starts
   summaryBoolean 
 showSummaryStringIndicates whether the schedule summary is enabled. The summary includes the time slot for schedule and which schedules are repeatable. This can be one of the following values.
  • true. The schedule summary is enabled.

  • false. The schedule summary is disabled.

The following example is returned if the request is successful for event forwarders to FTP servers.
[{
"authUser": "admin",
"characterEncoding": "UTF-8",
"charactersToRemove": null,
"createdBy": "ADMIN",
"description": "",
"enable": "false",
"eventFilter": {
"filter": {
"categories": ["WARRANTY", "GENERAL"],
"componentIDs": [],
"eventID": "",
"eventServices": [],
"excludedEventIDs": "",
"negateFilter": false,
"sourceIDs": [],
"typeSeverity": [{
"severity": "INFORMATIONAL",
"type": "AUDIT"
},
...,
{
"severity": "FATAL",
"type": "AUDIT"
}],
}
},
"forwardHidden": false,
"ftpAuthentication": "REGULAR",
"ftpFileName": "event_[[EventSequenceID]].txt",
"ftpPath": "lxca_events",
"id": "1534862502642",
"ignoreExcluded": false,
"ipAddress": "192.0.2.30",
"lastEditBy": "ADMIN",
"matchEverything": true,
"name": "FTP_forwarder",
"outputFormat": "Alert: [[EventDate]] [[EventMessage]]\n\nHardware Information:\n
Managed Endpoint : [[DeviceHardwareType]] at [[DeviceIPAddress]]\n
Device name : [[DeviceName]]\n
Product name : [[DeviceProductName]]\n
Host name : [[DeviceHostName]]\n
Machine Type : [[DeviceMachineType]]\n
Machine Model : [[DeviceMachineModel]]\n
Serial Number : [[DeviceSerialNumber]]\n
DeviceHealthStatus : [[DeviceHealthStatus]]\n
IPv4 addresses : [[DeviceIPV4Addresses]]\n
IPv6 addresses : [[DeviceIPV6Addresses]]\n
Chassis : [[DeviceChassisName]]\n
DeviceBays : [[DeviceBays]]\n
\n
LXCA is: [[ManagementServerIP]]\n
\n
Event Information:\n
Event ID : [[EventID]]\n
Common Event ID : [[CommonEventID]]\n
EventSeverity : [[EventSeverity]]\n
Event Class : [[EventClass]]\n
Sequence ID : [[EventSequenceID]]\n
Event Source ID : [[EventSourceUUID]]\n
Component ID : [[EventComponentUUID]]\n
Serial Num : [[EventSerialNumber]]\n
MTM : [[EventMachineTypeModel]]\n
EventService : [[EventService]]\n
Console link : [[ConsoleLink]]\n
iOS link : [[iOSLink]]\n
Android link : [[AndroidLink]]\n
System Name : [[DeviceFullPathName]]\n",
"port": "21",
"protocol": "ftp",
"requestTimeout": 30,
"scheduler": {
"showSummary": false,
"enabled": false,
"events": []
}
}]
Table 4. REST Web Services.
AttributesTypeDescription
createdByStringName of the user that created the event forwarder
descriptionStringDescription for the event forwarder
enableBooleanIndicates whether the event forwarder is enabled. This can be one of the following values.
  • true. (default) The event forwarder is enabled.

  • false. The event forwarder is disabled.

eventFilterObjectInformation about the types of events to forward
 filterObjectInformation about each event filter
  categoriesArray of stringsEvent categories. This can be one or more of the following values.
  • BULLETIN. Sends notification about new bulletins.
  • GENERAL. Sends notifications about audit events, based on the selected event classes and severities
  • STATUS_CHANGE. Sends notifications about changes in status.
  • STATUS_UPDATE
  • WARRANTY. Send notifications about warranties.
  componentIDsArray of stringsList of component IDs. If empty, all components are accepted.
  eventIDStringList of event IDs, separated by a comma, to be included
  eventServicesArray of stringsService type. This can be one or both of the following values.
  • none
  • support
  • user
  excludedEventIDsStringList of event IDs, separated by a comma, to be excluded
  negateFilterBooleanIndicates whether to exclude events that match the specified filter. This can be one of the following values.
  • true. Excludes (does not forward) events that match the specified filters.

  • false. Includes (forwards) events that match the specified filters.

  resourceGroupsUUIDsArray of stringsList of resource
  sourceIDsArray of stringsList of source IDs. If empty, all sources are monitored.
  typeSeverityArray of objectsEvent severity and type

If both sourceIDs and componentsIDs are empty, all events that match the typeSeverity filter are forwarded.

   severityStringEvent severity. This can be one of the following values.
  • Unknown. The severity is unknown.
  • Informational. Informational
  • Warning. User can decide if action is needed.
  • Minor. Action is needed, but the situation is not serious at this time.
  • Major. Action is needed now.
  • Critical. Action is needed now and the scope is broad (perhaps an imminent outage to a critical resource will result).
  • Fatal. A non-recoverable error has occurred.
   typeStringEvent type. This can be one of the following values.
  • Unknown
  • Audit
  • Cooling
  • Power
  • Disks. Storage
  • Memory
  • Processor
  • System. Rack or tower server
  • Test
  • Adaptor. Adapter card
  • Expansion. Expansion board
  • IOModule. Flex System switch
  • Blade. Flex System server
  • Switch
  • Other
  • Backplane
  • Chassis
  • Drive
  • ExtDrive. External drive
  • Fan
  • M2Adapter
  • M2Drive
  • OCP
  • PCIE
  • PSU
  • Retimer
  • Riser
  • 7MMDrive
  • Pump
forwardHiddenBooleanSpecifies whether to forward hidden events. This can be one of the following values.
  • true. Hidden events are forwarded.
  • false. (default) Hidden events are not forwarded.
idStringEvent forwarderID
ignoreExcludedBooleanSpecifies whether to disable the forwarding of excluded events. This can be one of the following values.
  • true. Ignores excluded events.

  • false. (default) Forwards excluded events.

ipAddressStringIPv4 or IPv6 address or hostname of the remote system that is the target to receive the events. For email, this is the SMTP server.
lastEditByStringName of the user that last edited the event forwarder
matchEverythingBooleanIndicates whether the action is to be run against all managed devices. This can be one of the following values.
  • true. The action is to be run against all managed devices.

  • false. The action is run against only the managed device that is specified by the target attribute.

nameStringUser-defined name for the event forwarder. This name must be unique for all event forwarders.
outputFormatStringOutput format of the forwarded event

Text between double square brackets are the fields that which are replaced with actual values. For a description of each field, use GET /events/monitors?format=formatKeys.

portStringTCP/UDP port used for the connection. For REST Web Services, this value is always 80.
protocolStringType of event forwarder. For REST Web Services, this value is always rest.
requestTimeoutIntegerAmount of time, in seconds, that an event forwarder has to forward events before the request times out

By default, the time-out value is 30 seconds.

restAuthenticationStringAuthentication type. This can be one of the following values.
  • basic. Authenticates to the specified server using the specified user ID and password.

  • none. No authentication is used.

restMethodStringREST method to use for forwarding events. This can be one of the following values.
  • POST
  • PUT
restPathStringResource path on which the forwarder is to post the events (for example, /rest/test)
restProtocolStringProtocol to use for forwarding events. This can be one of the following values.
  • HTTP
  • HTTPS
restRequestHeadersArray of stringsREST header to use for forwarding events
schedulerObjectInformation about times and days when you want the specified events to be forwarded to this event forwarder
 enabledBooleanIndicates whether the schedule is enabled. This can be one of the following values.
  • true. The schedule is enabled. Only events that occur during the specified time slot are forwarded.

  • false. The schedule is disabled. Events are forwarded 24x7.

 eventsArray of objectsList of event-forwarding schedules
   calendarStringSchedule name
   daysOfWeekArray of stringsDays of the week. This can be one or more of the following values.
  • 1. Monday

  • 2. Tuesday

  • 3. Wednesday

  • 4. Thursday

  • 5. Friday

  • 6. Saturday

  • 7. Sunday

   endingDateStringDate when the schedule ends
   endTimeStringTime when the schedule ends
   idIntegerSchedule ID
   initialEndTimeString 
   initialStartTimeString 
   repeatableBooleanIndicates whether the schedule is recurring. This can be one of the following values.
  • true. The schedule is recurring.

  • false. The schedule occurs only once.

   seriesIdIntegerSchedule index
   startingDateStringDate when the schedule starts
   startTimeStringTime when the schedule starts
   summaryBoolean 
 showSummaryStringIndicates whether the schedule summary is enabled. The summary includes the time slot for schedule and which schedules are repeatable. This can be one of the following values.
  • true. The schedule summary is enabled.

  • false. The schedule summary is disabled.

The following example is returned if the request is successful for event forwarders to REST Web Services.
[{
"createdBy": "ADMIN",
"description": "",
"enable": "true",
"eventFilter": {
"filter": {
"categories": ["WARRANTY", "GENERAL"],
"componentIDs": [],
"eventID": "",
"excludedEventIDs": "",
"eventServices": [],
"negateFilter": false,
"sourceIDs": [],
"typeSeverity": [{
"severity": "INFORMATIONAL",
"type": "AUDIT"
},
...,
{
"severity": "FATAL",
"type": "AUDIT"
}]
}
},
"forwardHidden": false,
"id": "1520009679583",
"ignoreExcluded": false,
"ipAddress": "192.0.2.40",
"lastEditBy": "ADMIN",
"matchEverything": true,
"name": "REST_forwarder",
"outputFormat": "{\"msg\":\"[[EventMessage]]\",\"eventID\":\"[[EventID]]\",
\"serialnum\":\"[[EventSerialNumber]]\",\"senderUUID\":\"[[EventSenderUUID]]\",
\"flags\":\"[[EventFlags]]\",\"userid\":\"[[EventUserName]]\",
\"localLogID\":\"[[EventLocalLogID]]\",\"systemName\":\"[[DeviceFullPathName]]\",
\"action\":[[EventActionNumber]],\"failFRUNumbers\":\"[[EventFailFRUs]]\",
\"severity\":[[EventSeverityNumber]],\"sourceID\":\"[[EventSourceUUID]]\",
\"sourceLogSequence\":[[EventSourceLogSequenceNumber]],
\"failFRUSNs\":\"[[EventFailSerialNumbers]]\",
\"failFRUUUIDs\":\"[[EventFailFRUUUIDs]]\",\"eventClass\":[[EventClassNumber]],
\"componentID\":\"[[EventComponentUUID]]\",\"mtm\":\"[[EventMachineTypeModel]]\",
\"msgID\":\"[[EventMessageID]]\",\"sequenceNumber\":\"[[EventSequenceID]]\",
\"timeStamp\":\"[[EventTimeStamp]]\",\"args\":[[EventMessageArguments]],
\"service\":[[EventServiceNumber]],\"commonEventID\":\"[[CommonEventID]]\",
\"eventDate\":\"[[EventDate]]\"}",
"port": "80",
"protocol": "rest",
"requestTimeout": 30,
"restAuthentication": "NONE",
"restMethod": "POST",
"restPath": "lxca_events",
"restProtocol": "HTTP",
"restRequestHeaders": [],
"scheduler": {
"enabled": false,
"events": [],
"showSummary": false
}
}]
Table 5. Remote SNMPv1 or SNMPv3 manager.
AttributesTypeDescription
authPasswordSetStringPassword string. This attribute is required if you specify authUser.
authProtocolStringAuthentication protocol. This can be one of the following.
  • MD5
  • SHA

This attribute is required if you specify authUser.

authUserStringAuthentication user ID if authentication is used
communityString(SNMPv1 only) The community password that is sent with every SNMP request to the device.
contactNameStringThe user-defined contact name for XClarity Administrator traps
createdByStringName of the user that created the event forwarder
descriptionStringDescription for the event forwarder
enableBooleanIndicates whether the event forwarder is enabled. This can be one of the following values.
  • true. (default) The event forwarder is enabled.

  • false. The event forwarder is disabled.

eventFilterObjectInformation about the types of events to forward
 filterObjectInformation about each event filter
  categoriesArray of stringsEvent categories. This can be one or more of the following values.
  • BULLETIN. Sends notification about new bulletins.
  • GENERAL. Sends notifications about audit events, based on the selected event classes and severities
  • STATUS_CHANGE. Sends notifications about changes in status.
  • STATUS_UPDATE
  • WARRANTY. Send notifications about warranties.
  componentIDsArray of stringsList of component IDs. If empty, all components are accepted.
  eventIDStringList of event IDs, separated by a comma, to be included
  eventServicesArray of stringsService type. This can be one or both of the following values.
  • none
  • support
  • user
  excludedEventIDsStringList of event IDs, separated by a comma, to be excluded
  negateFilterBooleanIndicates whether to exclude events that match the specified filter. This can be one of the following values.
  • true. Excludes (does not forward) events that match the specified filters.

  • false. Includes (forwards) events that match the specified filters.

  resourceGroupsUUIDsArray of stringsList of resource
  sourceIDsArray of stringsList of source IDs. If empty, all sources are monitored.
  typeSeverityArray of objectsEvent severity and type

If both sourceIDs and componentsIDs are empty, all events that match the typeSeverity filter are forwarded.

   severityStringEvent severity. This can be one of the following values.
  • Unknown. The severity is unknown.
  • Informational. Informational
  • Warning. User can decide if action is needed.
  • Minor. Action is needed, but the situation is not serious at this time.
  • Major. Action is needed now.
  • Critical. Action is needed now and the scope is broad (perhaps an imminent outage to a critical resource will result).
  • Fatal. A non-recoverable error has occurred.
   typeStringEvent type. This can be one of the following values.
  • Unknown
  • Audit
  • Cooling
  • Power
  • Disks. Storage
  • Memory
  • Processor
  • System. Rack or tower server
  • Test
  • Adaptor. Adapter card
  • Expansion. Expansion board
  • IOModule. Flex System switch
  • Blade. Flex System server
  • Switch
  • Other
  • Backplane
  • Chassis
  • Drive
  • ExtDrive. External drive
  • Fan
  • M2Adapter
  • M2Drive
  • OCP
  • PCIE
  • PSU
  • Retimer
  • Riser
  • 7MMDrive
  • Pump
forwardHiddenBooleanSpecifies whether to forward hidden events. This can be one of the following values.
  • true. Hidden events are forwarded.
  • false. (default) Hidden events are not forwarded.
idStringEvent forwarder ID
ignoreExcludedBooleanSpecifies whether to disable the forwarding of excluded events. This can be one of the following values.
  • true. Ignores excluded events.

  • false. (default) Forwards excluded events.

ipAddressStringIPv4 or IPv6 address or hostname of the remote system that is the target to receive the events. For email, this is the SMTP server.
lastEditByStringName of the user that last edited the event forwarder
locationStringLocation information, such as site, address, and geography
matchEverythingBooleanIndicates whether the action is to be run against all managed devices. This can be one of the following values.
  • true. The action is to be run against all managed devices.

  • false. The action is run against only the managed device that is specified by the target attribute.

nameStringUser-defined name for the event forwarder. This name must be unique for all event forwarders.
portStringTCP/UDP port used for the connection. For SNMP, this value is always 162.
privacyPasswordSetStringPrivacy password. This attribute is required if encryption is used.
privacyProtocolStringPrivacy protocol. This can be one of the following values.
  • AES
  • DES

This attribute is required if you specify privacyPassword.

protocolStringType of event forwarder. For SNMP, this can be one of the following values.
  • snmpv1. Events are forwarded to a remote SNMP manager using SNMPv1.

  • snmpv3. Events are forwarded to a remote SNMP manager using SNMPv3.

The trap formats for each event are defined in the lenovoMgrAlert.mib file.

requestTimeoutIntegerAmount of time, in seconds, that an event forwarder has to forward events before the request times out

By default, the time-out value is 30 seconds.

schedulerObjectInformation about times and days when you want the specified events to be forwarded to this event forwarder
 enabledBooleanIndicates whether the schedule is enabled. This can be one of the following values.
  • true. The schedule is enabled. Only events that occur during the specified time slot are forwarded.

  • false. The schedule is disabled. Events are forwarded 24x7.

 eventsArray of objectsList of event-fowarding schedules
   calendarStringSchedule name
   daysOfWeekArray of stringsDays of the week. This can be one or more of the following values.
  • 1. Monday

  • 2. Tuesday

  • 3. Wednesday

  • 4. Thursday

  • 5. Friday

  • 6. Saturday

  • 7. Sunday

   endingDateStringDate when the schedule ends
   endTimeStringTime when the schedule ends
   idIntegerSchedule ID
   initialEndTimeString 
   initialStartTimeString 
   repeatableBooleanIndicates whether the schedule is recurring. This can be one of the following values.
  • true. The schedule is recurring.

  • false. The schedule occurs only once.

   seriesIdIntegerSchedule index
   startingDateStringDate when the schedule starts
   startTimeStringTime when the schedule starts
   summaryBoolean 
 showSummaryStringIndicates whether the schedule summary is enabled. The summary includes the time slot for schedule and which schedules are repeatable. This can be one of the following values.
  • true. The schedule summary is enabled.

  • false. The schedule summary is disabled.

The following example is returned if the request is successful for event forwarders to remote SNMP managers.
[{
"authPasswordSet": "false",
"authProtocol": "NONE",
"authUser": "",
"contactName": "",
"createdBy": "ADMIN",
"description": "",
"enable": "true",
"eventFilter": {
"filter": {
"categories": ["GENERAL"],
"componentIDs": [],
"eventID": "",
"eventServices": [],
"excludedEventIDs": "",
"negateFilter": false,
"sourceIDs": [],
"typeSeverity": [{
"severity": "INFORMATIONAL",
"type": "AUDIT"
},
...,
{
"severity": "FATAL",
"type": "AUDIT"
}]
}
},
"forwardHidden": false,
"id": "1520009466990",
"ignoreExcluded": false,
"ipAddress": "192.0.2.50",
"lastEditBy": "ADMIN",
"location": "",
"matchEverything": true,
"name": "SNMP_forwarder",
"port": "162",
"privacyPasswordSet": "false",
"privacyProtocol": "NONE",
"protocol": "snmpv3",
"requestTimeout": 30,
"scheduler": {
"enabled": true,
"events": [{
"calendar": "Calendar1",
"daysOfWeek": ["1", "2", "3", "4", "5"],
"endingDate": "2017-12-31T22:00:00.000Z",
"endTime": "2017-10-06T21:00:00.000Z",
"id": 0,
"initialEndTime": "2017-10-06T21:00:00.000Z",
"initialStartTime": "2017-10-06T12:00:00.000Z",
"repeatable": true,
"seriesId": 1
"startingDate": "2017-10-06T12:00:00.000Z",
"startTime": "2017-10-06T12:00:00.000Z",
"summary": "Forwarder (repeatable)",
}],
"showSummary": false
}
}]
Table 6. Syslog.
AttributesTypeDescription
communicationProtocolStringIdentifies the type of protocol that the syslog monitor uses to send messages. This can be one of the following values.
  • TCP
  • UDP. (default)
createdByStringName of the user that created the event forwarder
dateFormatStringFormat for the timestamp in the syslog. This can be one of the following values.
  • Default_Format. The default format using local time, for example Fri Mar 31 05:57:18 EDT 2017.

  • GMT. International standard (ISO8601) for dates and times, for example 2017-03-31T05:58:20-04:00.

descriptionStringDescription for the event forwarder
enableBooleanIndicates whether the event forwarder is enabled. This can be one of the following values.
  • true. (default) The event forwarder is enabled.

  • false. The event forwarder is disabled.

eventFilterObjectInformation about the types of events to forward
 filterObjectInformation about each event filter
  categoriesArray of stringsEvent categories. This can be one or more of the following values.
  • BULLETIN. Sends notification about new bulletins.
  • GENERAL. Sends notifications about audit events, based on the selected event classes and severities
  • STATUS_CHANGE. Sends notifications about changes in status.
  • STATUS_UPDATE
  • WARRANTY. Send notifications about warranties.
  componentIDsArray of stringsList of component IDs. If empty, all components are accepted.
  eventIDStringList of event IDs, separated by a comma, to be included
  eventServicesArray of stringsService type. This can be one or both of the following values.
  • none
  • support
  • user
  excludedEventIDsStringList of event IDs, separated by a comma, to be excluded
  negateFilterBooleanIndicates whether to exclude events that match the specified filter. This can be one of the following values.
  • true. Excludes (does not forward) events that match the specified filters.

  • false. Includes (forwards) events that match the specified filters.

  resourceGroupsUUIDsArray of stringsList of resource
  sourceIDsArray of stringsList of source IDs. If empty, all sources are monitored.
  typeSeverityArray of objectsEvent severity and type.

If both sourceIDs and componentsIDs are empty, all events that match the typeSeverity filter are forwarded.

   severityStringEvent severity. This can be one of the following values.
  • Unknown. The severity is unknown.
  • Informational. Informational
  • Warning. User can decide if action is needed.
  • Minor. Action is needed, but the situation is not serious at this time.
  • Major. Action is needed now.
  • Critical. Action is needed now and the scope is broad (perhaps an imminent outage to a critical resource will result).
  • Fatal. A non-recoverable error has occurred.
   typeStringEvent type. This can be one of the following values.
  • Unknown
  • Audit
  • Cooling
  • Power
  • Disks. Storage
  • Memory
  • Processor
  • System. Rack or tower server
  • Test
  • Adaptor. Adapter card
  • Expansion. Expansion board
  • IOModule. Flex System switch
  • Blade. Flex System server
  • Switch
  • Other
  • Backplane
  • Chassis
  • Drive
  • ExtDrive. External drive
  • Fan
  • M2Adapter
  • M2Drive
  • OCP
  • PCIE
  • PSU
  • Retimer
  • Riser
  • 7MMDrive
  • Pump
forwardHiddenBooleanSpecifies whether to forward hidden events. This can be one of the following values.
  • true. Hidden events are forwarded.
  • false. (default) Hidden events are not forwarded.
idStringEvent forwarder ID
ignoreExcludedBooleanSpecifies whether to disable the forwarding of excluded events. This can be one of the following values.
  • true. Ignores excluded events.

  • false. (default) Forwards excluded events.

ipAddressStringIPv4 or IPv6 address or hostname of the remote system that is the target to receive the events. For email, this is the SMTP server.
lastEditByStringName of the user that last edited the event forwarder
matchEverythingBooleanIndicates whether the action is to be run against all managed devices. This can be one of the following values.
  • true. The action is to be run against all managed devices

  • false. The action is run against only the managed device that is specified by the target attribute.

nameStringUser-defined name for the event forwarder. This name must be unique for all event forwarders.
outputFormatStringOutput format of the forwarded event

Text between double square brackets are the fields that which are replaced with actual values. For a description of each field, use GET /events/monitors?format=formatKeys.

portStringTCP/UDP port used for the connection. For syslog, this value is always 514.
protocolStringType of event forwarder. For syslog, this value is always syslog.
requestTimeoutIntegerAmount of time, in seconds, that an event forwarder has to forward events before the request times out

By default, the time-out value is 30 seconds.

schedulerObjectInformation about times and days when you want the specified events to be forwarded to this event forwarder
 enabledBooleanIndicates whether the schedule is enabled. This can be one of the following values.
  • true. The schedule is enabled. Only events that occur during the specified time slot are forwarded.

  • false. The schedule is disabled. Events are forwarded 24x7.

 eventsArray of objectsList of event-fowarding schedules
   calendarStringSchedule name
   daysOfWeekArray of stringsDays of the week. This can be one or more of the following values.
  • 1. Monday

  • 2. Tuesday

  • 3. Wednesday

  • 4. Thursday

  • 5. Friday

  • 6. Saturday

  • 7. Sunday

   endingDateStringDate when the schedule ends
   endTimeStringTime when the schedule ends
   idIntegerSchedule ID
   initialEndTimeString 
   initialStartTimeString 
   repeatableBooleanIndicates whether the schedule is recurring. This can be one of the following values.
  • true. The schedule is recurring.

  • false. The schedule occurs only once.

   seriesIdIntegerSchedule index
   startingDateStringDate when the schedule starts
   startTimeStringTime when the schedule starts
   summaryBoolean 
 showSummaryStringIndicates whether the schedule summary is enabled. The summary includes the time slot for schedule and which schedules are repeatable. This can be one of the following values.
  • true. The schedule summary is enabled.

  • false. The schedule summary is disabled.

The following example is returned if the request is successful for event forwarders to syslogs.
[{
"communicationProtocol": "UDP",
"createdBy": "ADMIN",
"dateFormat": "Default_Format",
"description": "",
"enable": "true",
"eventFilter": {
"filter": {
"categories": ["WARRANTY", "GENERAL"],
"componentIDs": [],
"eventID": "",
"eventServices": [],
"excludedEventIDs": "",
"negateFilter": false,
"sourceIDs": [],
"typeSeverity": [{
"severity": "INFORMATIONAL",
"type": "AUDIT"
},
...,
{
"severity": "FATAL",
"type": "AUDIT"
}]
}
},
"forwardHidden": false,
"id": "1520009382682",
"ignoreExcluded": true,
"ipAddress": "192.0.2.60",
"lastEditBy": "ADMIN",
"matchEverything": true,
"name": "syslog_forwarder",
"outputFormat": "<8[[SysLogSeverity]]> [[EventTimeStamp]] [appl=LXCA service=[[EventService]]
severity=[[EventSeverity]] class=[[EventClass]] appladdr=[[LXCA_IP]]
user=[[EventUserName]] src=[[SysLogSource]] uuid=[[UUID]]
me=[[DeviceSerialNumber]] resourceIP=[[DeviceIPAddress]]
systemName=[[DeviceFullPathName]] seq=[[EventSequenceID]] EventID=[[EventID]]
CommonEventID=[[CommonEventID]] [[EventMessage]]",
"port": "514",
"protocol": "syslog",
"requestTimeout": 30,
"scheduler": {
"showSummary": false,
"enabled": false,
"events": []
},
}]