The event center centralizes, stores, analyzes, and displays event data generated by Alibaba Cloud services. The event center can manage the change events of Enterprise Distributed Application Service (EDAS), the alert events of Application Real-Time Monitoring Service (ARMS), 0-1 events such as deadlocks, out-of-memory (OOM), and application startups, the microservice governance events of Microservice Engine (MSE), and Kubernetes cluster events. If your application uses one of the related services, the event center automatically analyzes and displays the corresponding events in a unified manner. This provides an easy way for you to view and analyze the events.

Event model

The following table describes the parameters of an event in the event center.

Parameter Required Description
source Yes The source of the event.
type Yes The type of the event.
level Yes The severity level of the event.
time Yes The time when the event occurred.
data Yes The body of the event, which is generally in the JSON format.
PID No The ID of the pod.
IP No The IP address.
ClusterId No The ID of the cluster.
PodName No The name of the pod.

Procedure

  1. Log on to the ARMS console .
  2. In the left-side navigation pane, choose Application Monitoring > Event Center. In the top navigation bar, select a region.

Modules

The Event Center page consists of the Event Overview section that displays typical events and four tabs, including Normal View, Topology View, Cluster view, and Subscription rules.
  • Event Overview: The section displays the number of occurrences for the preset typical events. For more information, see Event overview.
  • On the Normal View tab, all events associated with the current application are analyzed and displayed in multiple dimensions. For more information, see Normal view.
  • On the Topology View tab, the events associated with the application and the resource topology of the application are displayed together. For more information, see Topology view.
  • On the Cluster view tab, all events associated with the current cluster are analyzed and displayed in multiple dimensions. For more information, see Cluster view.
  • On the Subscription rules tab, the created subscription rules are displayed in a list. For more information, see Subscription rules.

Event overview

The Even Overview section displays the number of occurrences for each type of preset typical event within the last 30 minutes. You can adjust the time range in the upper-right corner. To modify the subscription rule of an event, you can click Subscribe below the event. For more information about subscription rules, see Subscription rules.

Event overview

Normal view

On the Normal View tab, you can specify filter conditions to search for events. The search results are displayed in four sections: Heat map of events in the last two weeks, Proportion of events from different sources, Trend of the number of events from different sources, and Event Details.

Normal view
  • The Heat map of events in the last two weeks section displays the heat map for hourly occurrences of events that meet the filter conditions in the last two weeks. A darker color indicates more events in the hour.
  • The Proportion of events from different sources section displays the proportions of events from different sources.
  • The Trend of the number of events from different sources section displays the trends of events from different sources within a specified period.
  • The Event Details section displays details about all current events.

On the Normal View tab, you can perform the following operations:

  • In the Heat map of events in the last two weeks section, click each cell to view event details in the hour.
  • In the Trend of the number of events from different sources section, click each column to view all the events that occurred in the specified period in the Event Details section.
  • In the Event Details section, click View in the Actions column to view the details of an event.
  • In the Event Details section, click Subscription in the Actions column to subscribe to an event. For more information, see Subscription rules.

Topology view

On the Topology View tab, the resource topology of the application is displayed. The resources include the Elastic Compute Service (ECS) instances used by the application, pods on which the application is running, the ApsaraDB RDS and ApsaraDB for Redis middleware used by the application, and the Server Load Balancer (SLB) and NAT Gateway resources mounted on the application. After the resource topology is displayed, the obtained correlated events, ActionTrail events, and CloudMonitor events are associated with topology nodes. If you click a node, the events associated with the node are displayed in the Event Details section in the upper-left corner.
  • Application-side events: the events in the event center.
  • Events related to cloud resources: the events that CloudMonitor records.
  • Audit related operations: the audit records from ActionTrail.

The topology view helps you troubleshoot the associated resources when an application error occurs. For example, in a large enterprise, an employee mistakenly restarts an ApsaraDB RDS instance in the production environment, which leads to an online service failure. The topology view helps you find out the restart operation on the ApsaraDB RDS instance that is accessed by the application.

Topology view

Cluster view

On the Cluster view tab, you can specify filter conditions to search for events. The search results are displayed in five sections, including Proportion of events in different clusters, Trend of the number of events in different clusters, Overview of Key Events, Overview of Key Resources, and Event Details.

Cluster view
  • The Proportion of events in different clusters section displays the proportions of events in different clusters.
  • The Trend of the number of events in different clusters section displays the trends of events in different clusters within the specified period.
  • The Overview of Key Events section displays the number of occurrences for each type of preset typical events within the specified period in the specified cluster.
  • The Overview of Key Resources section displays the details of key resources in the specified cluster.
  • The Event Details section displays the details of all events in the specified cluster.

On the Cluster View tab, you can perform the following operations:

  • In the Trend of the number of events in different clusters section, click each column to view all the events that occurred in the specified period in the Event Details section.
  • Click View Cluster-related Events to view the details of all events in the specified cluster on the Normal View tab.
  • In the Overview of Key Events section, click the name of an event to view the details of the event on the Normal View tab.
  • In the Overview of Key Resources section, click View lifecycle related events. Then, you can view the events of resources in the specified period in the Event Details section.
  • In the Event Details section, click View in the Actions column to view the details of the event.
  • In the Event Details section, click Subscription in the Actions column to subscribe to the event. For more information, see Subscription rules.

Subscription rules

On the Subscription rules tab, all your existing subscription rules are displayed. You can enable, disable, or modify subscription rules on this tab.
Notice You can modify only the rules that you created in the console. You cannot modify rules that are automatically created by the system.
A subscription rule is used to specify the conditions that must be met when you subscribe to an event and send the event to the specified webhook. You can use one of the following methods to create a subscription rule:
  • Method 1: On the Subscription rules tab, click Create a subscription rule in the upper-right corner.
  • Method 2: In the Event Details section of the Normal View tab, click Subscription in the Actions column.

Create a subscription rule

  1. Click the Subscription rules tab. On this tab, click Create a subscription rule in the upper-right corner.
  2. In the Enter basic information tab of the Create a subscription rule panel, configure the Rule name and Rule description parameters, and then click Next.
  3. In the Select event mode step, configure the event parameters and click Next.
    Parameter Description
    Event Source Select an event source from the drop-down list.
    Event Type Select an event type from the drop-down list.
    Event Level Select a severity level from the drop-down list.
    Event Keywords Enter event keywords in the field.
    Show advanced filtering options By default, this switch is turned off. After you turn on the switch, you can configure filter conditions, including Associated Application ID, Host IP Address, Cluster ID, and POD name.
    Custom filter conditions A custom filter condition must be met by a field of the JSON event body. The root node of a custom filter condition is data. The root node drills down to a field of the JSON data in the form of .. Enter custom filter conditions. You can enter up to six filter conditions.
    Select a valid field Enter a valid field in the format of %data.x.y;. Then, enter an alias for the field. The alias can be used as a placeholder when you enter the POST request body of webhook information. You can set up to six valid fields.
    Notification Template

    The notification template specifies the content of the message that is sent to you. If the notification method is the webhook URL of the DingTalk chatbot, add the keyword of the DingTalk chatbot in the notification template.

  4. Select one or more contacts from the Select Contact drop-down list. Then, click Submitted.
    If no contact is available in the Select Contact drop-down list, click Create Contact to create a contact. After you create a contact, select the contact from the Select Contact drop-down list.

Subscribe to events on the Normal View tab

  1. In the Event Details section of the Normal View tab, click Subscription in the Actions column.
    If you create a subscription rule by using this method, the filter conditions, including the source, type, and severity level are automatically selected based on the event.
  2. Enter a value in the Value field in the JSON file of the event. This way, you can specify custom filter conditions and valid fields. A filter condition and a valid field are automatically generated each time you click a field. You can manually modify or delete the fields to adjust the subscription rule. After you select an event mode, click Next.
  3. Select one or more contacts from the Select Contact drop-down list. Then, click Submitted.
    If no contact is available in the Select Contact drop-down list, click Create Contact to create a contact. After you create a contact, select the contact from the Select Contact drop-down list.