The Log and Trace Analyzer that is included with this product maps the currently supported log formats into a common event model called Common Base Event. This allows the analyzer to use a common format for any log records from any supported log files. The parsers provided with the Log and Trace Analyzer maps the log records from their current output format to this common model.
An event, which is the occurrence of an situation, can take a variety of forms. These forms include business, autonomic, management, tracing and logging events. Events encapsulate message data and are therefore the foundation on which complex information technology systems operate. Data elements of these events need to be in a consistent format to enable correlation among these events. This is required to facilitate the effective intercommunication among disparate enterprise applications in such systems.
The Common Base Event model is the new standard for events among the different types of enterprise applications. This standard proposes
consistency of data elements that comprise these events, both in the elements themselves and in their format.
The Common Base Event definition ensures completeness of the data by providing properties to publish general information, which is
collectively referred to as the 3-tuple, whenever a situation occurs.
The following elements constitute the 3-tuple:
Refer to the latest version of the Canonical Situation Data Format: Common Base Event 1.0.1.
Related reference
JSR-047 and Commons Logging support
Related tasks
Guide for creating a log parser
and correlator
Guide for creating an analysis
engine
Related reference
Generic interface for parsers