Evaluating the queries that find events

By default, the product searches for events in Tivoli® Netcool/OMNIbus that match the fully qualified domain name or IP address of the CI. You, as the Control Desk expert and your company 's Tivoli Netcool/OMNIbus expert should evaluate the queries to ensure that they fit your specific environment. You can decide to keep or remove the default mappings and queries and you can add your own.

About this task

To ensure that you can view event details for your CIs, determine how your data in Control Desk matches up with the event data that you have in Tivoli Netcool/OMNIbus. An overview of steps to take is provided. The procedure then steps through several of the items in the overview.

Overview:

Determine which classifications of CIs you want to retrieve events for, and ensure that those classifications are mapped to the EVENT OSLC resource type.
Note: You can view a list of CI classifications and the event types that they map to in the CI to Tivoli Netcool/OMNIbus event mappings on the Control Desk wiki.
Determine which attributes of the CIs you want to use to find events in Tivoli Netcool/OMNIbus, and how those attributes match the properties in the Event resource type.
Determine whether you want to use the default queries to find events.
If you keep the default queries, determine whether you want to customize the query parameters. The default queries search for events that are greater than or equal to severity 3 and created no more than seven days ago.
Determine whether you want to create your own queries.
Add the attributes that you found in the second bullet to the query parameters table.

Procedure

Ensure that your CI classifications are mapped to the EVENT Resource type in the OSLC Resource Type Mapping dialog.
1. Go to Administration > Classifications or Integration > OSLC Providers.
2. Select the action, Configure OSLC Resource Mapping to access the dialog.
3. Use the Resource Type and Classifications table to add, change, or delete mappings between Classifications and the Event resource type. Click the arrow next to a mapping to view its details.
4. The attributes of the CI that you want to use to find matching events also must be mapped to Event properties. Use the Resource Properties and Attributes table to add, change, or delete mappings between Classification attributes and Event properties.
To view the default queries, go to Integration > OSLC Providers.
Open SCCDOMNIBUS, the Tivoli Netcool/OMNIbus provider and locate the Queries table. The first query is the fully qualified domain name query, and the second query is the IP address query.
If you do not want to keep the fully qualified domain name or IP address queries, remove them from the Queries table by clicking the X next to each query.
If you want to keep the default queries, you can edit their parameters if you choose. Expand each query to view the parameters.
1. The default queries each contain a severity parameter that searches for events for the CI that are greater than or equal to severity 3. To change this parameter in a query, change the Mapping Expression value. You can also change the Operator. Tivoli Netcool/OMNIbus events can be reported problems (3-5), informational in nature (1-2), or even resolution events that equate to a closed status (0). The Event severity levels topic explains the parameters.
  Example: To search for only severity 5 events, change Operator to EQUALS and change Mapping Expression to 5.
2. The default queries also contain a parameter that searches for events that are no more than seven days old. That is, Operator is set to GREATEROREQUAL and Mapping Expression is set to &sysdate&-7D. To change this parameter in a query, expand the query and change the Mapping Expression value to the date value that you want. Valid date values start with &sysdate&. Y, M, D, h, m, and s are all valid measurement values corresponding to year, month, day, hour, minute, and second. Example: To search for events that are less than or equal to one year, set Operator to GREATEROREQUAL and set Mapping Expression to &sysdate&-1Y.
If you want to add your own query to the Queries table, select New Row, set Query Type to CUSTOM, and add the com.ibm.ism.cci.app.ci.CCIOslcQueryClause class to Query Class. This class contains all of the logic that looks at the OSLCresource type mappings, and completes values from the CI into this query.
In the Query Parameters section, add the event property that you want to query on.
Important: You can add multiple query parameters. If a query contains multiple parameters, all of the parameter values must match on the event to be able to find it.
You can specify an Operator and Mapping Expression to set up a condition for a query parameter. Example: To set up a query that searches for events with a severity of 3 or higher, select GREATEROREQUAL for the Operator and add 3 to Mapping Expression.
Note: If you provide a mapping expression, then the query uses that value for the property. If you do not provide a mapping expression, the query looks up the mapping for the property and obtain the value from the CI.
For each query, add the attributes that you want to the Query Parameters table by clicking New Row. Select the Event property that you mapped your attribute to. The value of the attribute you mapped is used as the value for this property to query events in Tivoli Netcool/OMNIbus.
Note: If you add more attributes to the query, all of the event values must match the values on the CI.

Feedback