Alerts Schema

AVRO schema for Alerts event

{
  "type" : "record",
  "name" : "Alert",
  "fields" : [ {
    "name" : "GROUPNAME",
    "type" : "string"
  }, {
    "name" : "SERVERTIME",
    "type" : "long"
  }, {
    "name" : "RULEID",
    "type" : "string"
  }, {
    "name" : "RULENAME",
    "type" : "string"
  }, {
    "name" : "SEVERITY",
    "type" : "string"
  }, {
    "name" : "SERIALNUMBER",
    "type" : "string"
  }, {
    "name" : "DETAILS",
    "type" : [ "null", {
      "type" : "array",
      "items" : {
        "type" : "record",
        "name" : "Aggregation_details",
        "namespace" : "com.nokia.impact.ids",
        "fields" : [ {
          "name" : "key",
          "type" : [ "null", "string" ],
          "default" : null
        }, {
          "name" : "value",
          "type" : [ "null", "string" ],
          "default" : null
        } ],
        "connect.internal.type" : "MapEntry"
      },
      "connect.name" : "com.nokia.impact.ids.Aggregation_details"
    } ],
    "default" : null
  }, {
    "name" : "ACTIONS",
    "type" : {
      "type" : "array",
      "items" : [ "null", "string" ]
    }
  } ],
  "connect.version" : 1,
  "connect.name" : "Alert"
}

Table 1. Alert Schema Descriptions
Field Name	Description	Field type
GROUPNAME	Specifies the group to which the device pertains to.	string
SERIALNUMBER	Specifies the unique endpoint ID of the device.	string
SERVERTIME	Specifies the server processing time (number of milliseconds since 1970).	long
RULEID	Specifies the generated unique uuid represented as Id of the Rule.	string
RULENAME	Specifies the name of the rule created.	string
SEVERITY	Specified for ALERT_RULE. Defines the severity of the alert. Can be CRITICAL, MAJOR, MINOR, UNDEFINED.	string
DETAILS	Specifies the details of the devices parameters on which the rule is applied.	map
ACTIONS	Specifies what action should be taken from the alert event. Decide the persistence to cassandra/ S3/ or any other types of actions.	array