The Event Management Dashboard consists of a tabbed view containing three tabs:
The Summary Tab data consists of three panels:
Summary Tab
This panel displays various event distribution pie charts including:
You can navigate through the various distributions as follows:
Summary Tab Docker
This panel displays:
Services are a representation of a filtered set of events. For example, a service might represent all the events with a particular node attribute value, events of a certain age or type, or all of these.
This panel is able to display up to 18 services. Each service is labelled with its name and the number of events the service filter gives rise to. The colour of the service icon is determined by the highest severity event the service represents. For example if a service represents at least one critical event its icon will be red. If a service represents at least one major event its icon will be amber, yellow for at least one minor event and so on for services with only info events (and lower) and only unknown events. A service with no events will have a green icon.
Click on a service state icon or label to navigate to the Events Tab with appropriately filtered content, i.e. the contents of the event list will be the events represented by the service. For example, if you click on the service called Earth the event list will contain all the events that are represented by the Earth service.
The Summary Tab Docker contains a set of radio buttons that when clicked will change the order (left to right, top to bottom) in which services are displayed in the Service States Panel:
Note that as new events enter the system and the order of services change based on the currently selected sort order, the displayed order will be updated accordingly.
The Service Tab displays a service panel for each configured service. Each panel provides a chart describing various event distributions and a message stating when the last critical event represented by this service was seen. The panel title-bar represents the current service state with an icon (coloured in the same way as the services in the Service States Panel), the service name and how many events the service currently represents.
Service Tab
The Service Tab also has a Summary Tab Docker that can be used to change the displayed service sort order (left to right, top to bottom).
Summary Tab Docker
You can navigate through the various distributions provided by each service panel by performing a Ctrl+Click on the chart and it will display the next distribution. A Ctrl+Click on the last distribution will cause the first to be displayed again.
Note
Click-through to a related event list is not currently supported.
Each service panel can be toggled between a pie chart or a bar chart by performing a Shift+Click on the chart. Ctrl+Click on a bar chart will navigate through the available distributions in the same way as described above.
The Summary Tab Docker contains a set of radio buttons that when clicked will change the order (left to right, top to bottom) in which services are displayed in the Service States Panel:
Note that as new events enter the system and the order of services changes, based on the currently selected sort order, the displayed order will also be updated.
The Events Tab displays a sortable, filterable, paginated Event List. This is where you will browse and interact with events gathered by the system. The event list can display the events in a number of colour modes. It is possible to configure which columns are displayed.
Events Tab
The Events Tab also has a multi-tab Summary Tab Docker that is used for various operations and is described in more detail later in this section.
Summary Tab Docker
The event list displays all the events gathered by the system. By default the following event attributes are displayed: Type, Severity, Count, State, Node, First Seen, Last Seen, Owner, Description. Using the Settings Tab you can hide these or additionally display the following attributes: Key, Label, IP, Expires, Group and Source. Refer to Reef Events for a description of the event attributes.
Events are (by default) split into pages of 100 events each and you can use the buttons on the Actions Tab to navigate to subsequent pages.
By default events are colour coded by severity (e.g. red for critical events) but you can use the controls in the Actions Tab to change the event colour mode (e.g. colour the events by type or state).
Select an event by clicking on a row in the event list. When a row is selected, event details and event logs are available for inspection in the Details Tab, Logs Tab and Attributes Tab respectively. Also, the docker title bar is updated to reflect the selection.
Multiple selections are possible by using the Ctrl and Shift modifier keys so that Ctrl+click will select multiple individual events and Shift+click will select all events from the last selection to the current selection (this is normal list multiple selection behaviour in most systems). The following keystrokes are also understood:
Event List Frozen Message
It is possible to sort the event list alphanumerically in ascending or descending order for one or more columns.
Note
The severity column exhibits special behaviour and is sorted by severity, not alphanumerically. This means an ascending sort will display events unknown -> critical top to bottom. A descending sort of the severity column will display events critical -> unknown top to bottom.
When a column is sorted, event data is sorted for all event data across all pages. To sort a column in ascending order, click the column header for the first time. An up-arrow indicating the column is sorted in ascending order will be displayed alongside the column label.
To sort a column in descending order, click the column header again. A down-arrow indicating the column is sorted in descending order will be displayed along-side the column label.
Clicking subsequent columns will sort the events in groups based on the last column sorted, i.e. sorting the count column followed by the node column will display:
Note
The severity column sort order is always primary and does not participate in multiple-column sorts.
To delselect a column’s sort-order, Ctrl+click the column header. Any up-arrow or down-arrow displayed will be removed and the column will revert to its original, unsorted order.
The event list can be filtered in a number of ways. One way already discussed is exercising the click-throughs from the Summary Tab. After performing a click-through you can show all the events again clicking the Show All button on the Filters Tab.
The Filters Tab contains other built-in filters which will be described later in this section. Reef also allows you to perform ad-hoc filtering for each column, described below.
Each column in the Event List has a filter box above the column header. Entering a value using the filter box will filter the events displayed, across all pagess. As you refine the filter terms the number of pages may decrease as less events fulfil the filter criteria you entered.
When you enter a filter term in one or more filter boxes the Message Pane display the following message:
Click on the message to clear all current filter terms defined.
There are different types of filter boxes including a Text Filter, a Numeric Filter and a Date Filter.
The text filter allows you to enter a regular expression to match attribute values in the column being filtered. This can be a simple string, e.g. if you want to look for all critical events just type crit in the filter box for the Severity column. The regular expression entered is treated case-insensitively. Below are some examples of more sophisticated filter terms:
There is a full Regular Expression Syntax reference in an appendix to this document.
This filter allows you to filter based on numeric ranges rather than string pattern matching. Click on the filter box to display the Numeric Filter Dialogue.
Numeric Filter Dialogue
The numeric filter has three modes; Greater Than, Less Than and Range. For the first two modes, move the slider’s cursor to the desired value. By default the maximum value is 100 and the slider will snap to x10 incements. Use the Maximum radio buttons to increase the maximum if necessary and un-check the Snap check-box to provide a x1 slider granularity.
Click the Range mode to filter for events with a numeric column value that falls between two specific values.
If you need to see behind the Numeric Filter Dialogue while defining values simply click (anywhere on the dialogue that is not a control) and drag it to another position.
When the desired value has been set, click the Set button and the filter term will be applied. Click Clear to clear an existing filter term (this is analogous to deleteing the contents of a Text Filter). Click Cancel to leave the numeric filter term in the state it was before the numeric filter box dialogue was opened.
This filter allows you to filter based on a date range rather than string pattern matching. Click on the filter box to display the Date Filter Dialogue.
Date Filter Dialogue
The date filter allows you to define a start and end date in one of two modes:
Calendar Control
You are allowed to combine delta and absolute start and end dates, the only rule is that the start date (defined by the upper control) represents a date/time prior to end date (defined by the lower control). A description of the settings are displayed at the bottom of the dialogue. If the settings break the rules described above, an error message is displayed instead.
If you need to see behind the Date Filter Dialogue while defining values simply click (anywhere on the dialogue that is not a control) and drag it to another position.
When the desired value has been set, click the Set button and the filter term will be applied. Click Clear to clear an existing filter term (this is analogous to deleteing the contents of a Text Filter). Click Cancel to leave the date filter term in the state it was before the date filter box dialogue was opened.
The Actions Tab contains controls to:
Actions Tab
When you acknowledge an event the owner attribute is set to your username, indicating that you have taken ownership of the event. When one or more events are selected the the Acknowledge button is enabled. Click the Acknowledge button to acknowledge all selected events.
When you clear an event its state is set to man_cleared and its expire time is set to now + 5 minutes after which time the event is deleted from the event database. When one or more events are selected the the Clear button is enabled. Click the Clear button to clear all selected events.
When you delete an event its expire time is set to now which causes the event to be immediately deleted from the event database. When one or more events are selected the the Delete button is enabled. Click the Delete button to delete all selected events.
Note
The Delete keystroke has the same effect as clicking the Delete button on the action tab.
The Delete All button is always enabled. Clicking this button will delete all events in the event database, so use with caution. You will be prompted with an Are You Sure dialogue first.
Note
If you use the Ctrl+A keystroke and click Delete or use the Delete keystroke only delete the events on the current page will be deleted.
The actions tab provides controls to change the event colour coding:
The filters tab provides buttons to:
The details tab displays event attribute values of the last selected event.
As discussed in the Event Logs section an event records updates to its attributes as they are updated and those logs are displayed here for the last selected event.
As discussed in the Additional Event Fields section an event may have additional attributes that Reef does not support by default and those attributes are displayed here for the last selected event.
This tab enables the user to select which event attributes should be displayed in the event list.