Event Policy UI Time Filter Attribute and Search Behavior

Products

• CA Service Operations Insight (SOI)

Issue/Introduction

When using the time filter option in the CA Service Operations Insight (SOI) Event Policies UI, users may report that events do not show up when the filter is set to a specific duration (e.g., longer than 24 hours). For shorter durations, events may appear, but increasing the window by even one hour (e.g., from 24 to 25 hours) results in no events being displayed.

Cause

The Event Policy UI search functionality does not query a database attribute for event timestamps. Instead, it performs a search against the raw Event Store XML files residing on the connector server.

If the filter is set to a timeframe for which no XML files exist in the EventStore directory—due to file rotation, deletion, or lack of event processing during that period—the UI will return no results.

Resolution

To verify why events are not appearing in the search, perform the following steps on the connector server being queried:

1. Locate the EventStore Directory:
   Navigate to the following path on the connector server:
   \SOI\resources\Core\EventStore\

2. Verify File Existence:
   Check for .xml files corresponding to the specific connector you are searching (e.g., CA-00005.xml, CA-09993.xml).

3. Check Timestamps:
   Confirm that the date and time of the available XML files match the timeframe you are attempting to filter in the UI.

4. Confirm Search Behavior:
   Understand that the search looks at the physical files. If the files for the requested 25-hour window are missing from this directory, the search will be empty.