Alerts Schema

AVRO schema for Alerts event 

{
  "type" : "record",
  "name" : "Alert",
  "fields" : [ {
    "name" : "GROUPNAME",
    "type" : "string"
  }, {
    "name" : "SERVERTIME",
    "type" : "long"
  }, {
    "name" : "RULEID",
    "type" : "string"
  }, {
    "name" : "RULENAME",
    "type" : "string"
  }, {
    "name" : "SEVERITY",
    "type" : "string"
  }, {
    "name" : "SERIALNUMBER",
    "type" : "string"
  }, {
    "name" : "DETAILS",
    "type" : [ "null", {
      "type" : "array",
      "items" : {
        "type" : "record",
        "name" : "Aggregation_details",
        "namespace" : "com.nokia.impact.ids",
        "fields" : [ {
          "name" : "key",
          "type" : [ "null", "string" ],
          "default" : null
        }, {
          "name" : "value",
          "type" : [ "null", "string" ],
          "default" : null
        } ],
        "connect.internal.type" : "MapEntry"
      },
      "connect.name" : "com.nokia.impact.ids.Aggregation_details"
    } ],
    "default" : null
  }, {
    "name" : "ACTIONS",
    "type" : {
      "type" : "array",
      "items" : [ "null", "string" ]
    }
  } ],
  "connect.version" : 1,
  "connect.name" : "Alert"
}
Table 1. Alert Schema Descriptions
Field Name Description Field type
GROUPNAME Specifies the group to which the device pertains to. string
SERIALNUMBER Specifies the unique endpoint ID of the device. string
SERVERTIME Specifies the server processing time (number of milliseconds since 1970). long
RULEID Specifies the generated unique uuid represented as Id of the Rule. string
RULENAME Specifies the name of the rule created. string
SEVERITY Specified for ALERT_RULE. Defines the severity of the alert. Can be CRITICAL, MAJOR, MINOR, UNDEFINED. string
DETAILS Specifies the details of the devices parameters on which the rule is applied. map
ACTIONS

Specifies what action should be taken from the alert event.

Decide the persistence to cassandra/ S3/ or any other types of actions.

 array