Event field name

Field value

DeviceProcessName

Service name.

DeviceFacility

Service type.

DeviceExternalID

Service ID.

DeviceCustomString6Label

tenant name

DeviceCustomString6

Tenant name.

DeviceCustomString5Label

tenant ID

DeviceCustomString6

Tenant ID

DeviceCustomString2Label

Possible values:

• QPS threshold reached
• Failed Insert QPS threshold reached
• High distribution queue
• Low disk space
• Low disk partition space
• Output Event Loss increasing
• Disk buffer size increasing
• Enrichment errors increasing
• High enrichment queue
• Connector log errors increasing

DeviceCustomString1

created (service creation time)

DeviceCustomString2Label

API port

DeviceCustomNumber1

uptime in seconds

DeviceAction

service alert

DestinationHostName

FQDN of the machine where the service is running

DestinationAddress

Address of the machine where the service is running