Severity & Status Codes
Event severity
Section titled “Event severity”GridNMS uses a single 5-level severity scale everywhere:
| Level | Name | Color | Use |
|---|---|---|---|
| 1 | Critical | Red | Total outage, link down, cold start |
| 2 | Error | Orange | Auth failure, partial failure |
| 3 | Warning | Yellow | Warm start, threshold breach, EGP loss |
| 4 | Info | Blue | Link up, routine informational |
| 5 | Debug | Gray | Verbose, diagnostic |
When a detection has a severity threshold, you’re choosing the maximum level to be
notified about — a threshold of 3 notifies on Critical, Error, and Warning.
Event status
Section titled “Event status”| Status | Meaning |
|---|---|
| 0 | Open |
| 1 | Acknowledged |
| 2 | Closed |
A clearing event (e.g. PING_UP after PING_DOWN) auto-closes the matching open
event for the same device and tag.
Device reachability
Section titled “Device reachability”Alive value |
Meaning |
|---|---|
| 1 | Up |
| 0 | Down |
| (none) | Unknown — not yet polled |
Common event tags
Section titled “Common event tags”| Tag | Raised by | Meaning |
|---|---|---|
PING_DOWN |
monitor | Device became unreachable (Critical) |
PING_UP |
monitor | Device returned (Info); clears PING_DOWN |
SNMP_LINK_DOWN |
snmptrap | Interface down trap (Critical) |
SNMP_LINK_UP |
snmptrap | Interface up trap (Info) |
SNMP_COLD_START |
snmptrap | Device cold start (Error) |
SNMP_AUTH_FAIL |
snmptrap | SNMP authentication failure (Error) |
See Events & Alerts for the full mapping of syslog priorities and SNMP trap types onto these severities and tags.