EAA framework

EAA framework includes a set of event sources, a set of event monitors, a real-time event manager (RTM), and a set of user-defined monitor policies, as shown in Figure 77.

Event sources are software or hardware modules that trigger events (see Figure 77).

For example, the CLI module triggers an event when you enter a command. The Syslog module (the information center) triggers an event when it receives a log message.

EAA creates one event monitor to monitor the system for the event specified in each monitor policy. An event monitor notifies the RTM to run the monitor policy when the monitored event occurs.

RTM manages the creation, state machine, and execution of monitor policies.

A monitor policy specifies the event to monitor and actions to take when the event occurs.

You can configure EAA monitor policies by using the CLI or Tcl.

A monitor policy contains the following elements:

• One event.

• A minimum of one action.

• A minimum of one user role.

• One running time setting.

For more information about these elements, see "Elements in a monitor policy."