SYSTEM_ALARM

This error tag corresponds to syslog messages notifying that there has been a change in status for an alarm. There are multiple entries for this error. The reason being that the exact component name can be contained in the reason section, so has to be extracted via a specific regex.

Maps to the ietf-hardware YANG model.

Implemented for

  • junos

Syslog message example

<28>Jul  8 23:04:13  vmx01 alarmd[2449]: Alarm set: Pwr supply color=YELLOW, class=CHASSIS, reason=PEM 1 Fan Failed

Structured message example

{
  "error": "SYSTEM_ALARM",
  "facility": 3,
  "host": "vmx01",
  "ip": "127.0.0.1",
  "message_details": {
      "date": "Jul  8",
      "facility": 3,
      "host": "vmx01",
      "hostPrefix": null,
      "message": "Pwr supply color=YELLOW, class=CHASSIS, reason=PEM 1 Fan Failed",
      "pri": "28",
      "processId": "2449",
      "processName": "alarmd",
      "severity": 4,
      "tag": "Alarm set",
      "time": "23:04:13"
  },
  "os": "junos",
  "severity": 4,
  "timestamp": 1499555053,
  "yang_message": {
      "hardware-state": {
          "component": {
              "supply": {
                  "class": "CHASSIS",
                  "name": "supply",
                  "state": {
                      "alarm-reason": "PEM 1 Fan Failed",
                      "alarm-state": 4
                  }
              }
          }
      }
  },
  "yang_model": "ietf-hardware"
}