events.POOL Stream¶
events.POOL
stream is a part of Events Pipeline. Registered events are passed in unified way from various collectors to classifier service for further analysis.
Each system Pool has separate events
stream instance. i.e. DEFAULT
pool will use events.DEFAULT
stream, while CORE
pool will use events.CORE
stream.
Publishers¶
- ping service.
- syslogcollector service.
- trapcollector service.
Subscribers¶
- classifier service.
Message Headers¶
events
stream doesn't use additional headers.
Message Format¶
events
stream carries JSON-encoded messages.
Field | Type | Description |
---|---|---|
ts | Integer | Event timestamp, UNIX epoch |
object | Integer | Managed Object Id |
data | Object | Message Data |
source | String | Message source: |
source | String | Message source: |
ping | ||
syslog | ||
SNMP Trap | ||
collector | String | Pool name |
message | String | Incoming syslog message, if any |
<OID> | String | SNMP Trap varbinds in key-value format |