Skip to content
CA Spectrum - 10.2 to 10.2.3
Documentation powered by DocOps

Event Configuration

Last update April 28, 2017

CA Spectrum Event and Alarm Concepts

This section provides a brief overview of conceptual information about Events and Alarms.


About Alarms and Events

CA Spectrum is a services and infrastructure management system that notifies you of faults on managed elements within the network infrastructure. CA Spectrum receives alerts from problem areas within the managed infrastructure. CA Spectrum converts alerts into events and alarms, which are displayed in OneClick event and alarm views. Alerts, events, and alarms let CA Spectrum notify you about significant occurrences in your IT infrastructure.


An alert is an unsolicited message from a managed element on a network. A more specific definition of an alert depends on the management protocol that is used to report the alert. In general, CA Spectrum uses SNMP as the management protocol to communicate with devices on a network. Alerts that an SNMP-compliant device generates are named traps.

You can configure managed elements that have enabled the SNMP traps to direct their traps to the host that is running CA Spectrum. The host receives a trap CA Spectrum and identifies the model in the CA Spectrum database that is associated with the managed element, using the source IP address. Next, CA Spectrum maps the trap to a CA Spectrum event. The event is then generated and processed.

CA Spectrum applies special handling to traps that are not mapped to specific CA Spectrum events. Traps that occur on managed elements that are not modeled at the time the trap is received are also handled differently. For more information, see Modeling and Managing Your IT Infrastructure.

You map the traps from a managed element to specific CA Spectrum events using the MIB Tools application in OneClick. Perform these mappings before you can create and modify the events and associated alarms using Event Configuration. For more information, see Certifications.


An event is a CA Spectrum object that indicates that something significant has occurred within CA Spectrum itself or within the managed environment. Events always occur in relation to a model. When CA Spectrum receives an alert from a managed element on the network, in response, it generates a CA Spectrum event for the corresponding model if the received trap is mapped to an event.

CA Spectrum also generates some events automatically. For example, CA Spectrum generates an event when models are created or destroyed or when CA Spectrum connects or disconnects from a device application. CA Spectrum also generates an event when contact with a managed element is established or lost.

CA Spectrum uses the configuration of the underlying event to process an event instance. For example, the Archive Manager in the Distributed Data Manager (DDM) database can log an event instance. Or an event instance can clear an alarm or can generate another event using an event rule.

Network operators can view the list of current events in a landscape on the OneClick Events tab. For a specific event, you can also view information such as a description of the event and the time it was created.

To map the traps from a device to specific CA Spectrum events, use the MIB Tools application in OneClick. Then complete event customization using Event Configuration. In Event Configuration, define event processing rules, create the event message to display to users, and set other parameters.

Event Codes

Every event has a unique event code. The event code is a 4-byte integer that is expressed in hexadecimal format.

An event code has two parts:

  • The first 2 bytes contain the developer ID of the developer who created the event
  • The last 2 bytes identify the event with a unique number relative to all other event codes for that developer

CA Spectrum assigns event codes to all events created using MIB Tools or Event Configuration. The next available event code is always used as the default code. In Event Configuration, you have the option of overriding the default code and specifying a different one.

Note: The event code 0x10000 represents a null event. This event cannot be generated. However, the null event can be used in an event rule that requires an event code as a parameter.


An alarm is a CA Spectrum object that indicates that a user-actionable, abnormal condition exists in a model. CA Spectrum generates an alarm when a CA Spectrum event -- typically generated as a result of a received trap -- specifies an alarm creation. CA Spectrum can generate an alarm that is based on the results of a watch. CA Spectrum can also send an event in response to an abnormal situation that did not send an event. (For example, a model loses the connection to its managed element).

Network operators are alerted to alarms in multiple ways that depend on OneClick configuration. For example, the icon representing the model of the managed element (or a container model for the managed element model) can change color. Or an audio message can announce the new alarm.

Operators can view the current list of alarms in a landscape on the OneClick Alarms tab. For a specific alarm, you can also view detailed information. For example, you can see whether a user has acknowledged the alarm, its symptoms, probable causes, and the recommended corrective actions.

When the abnormal condition that caused the alarm ends, another event automatically clears the corresponding alarm. You can clear the alarm manually and also send any Alarm notifications to external third-party or internal CA Spectrum applications as appropriate.

You can specify whether an event generates an alarm (and alarm severity) in MIB Tools when you map a trap to an event. However, you use Event Configuration to set more alarm parameters and to change the alarm severity.

The following figure illustrates the flow of alerts, events, and alarms within CA Spectrum.


This section contains information about the following topics:

Was this helpful?

Please log in to post comments.