Event field name

Field value

DeviceProcessName

Service name.

DeviceFacility

Service type.

DeviceExternalID

Service ID.

DeviceCustomString6Label

tenant name

DeviceCustomString6

Tenant name.

DeviceCustomString5Label

tenant ID

DeviceCustomString5

Tenant ID

DeviceCustomString2Label

Possible values:

• QPS threshold reached
• Failed Insert QPS threshold reached
• High distribution queue
• Low disk space
• Low disk partition space
• Output Event Loss increasing
• Disk buffer size increasing
• Enrichment errors increasing
• High enrichment queue
• Connector log errors increasing

DeviceCustomString2

created (service creation time)

DeviceCustomString1Label

API port

DeviceCustomNumber1

uptime in seconds

DeviceAction

service alert

DestinationHostName

FQDN of the machine where the service is running

DestinationAddress

Address of the machine where the service is running