It records these events in data files named Event.dat, located in the directory defined in the
-datadir agent startup option. Data files contain event monitoring information, while separate log files named
Event.log record the state of the Event Service itself.
The dns field has a value of
none unless an agent domain is specified. The
alert-id field is a numeric identifier for the alert that is unique across
host-name and
dns combinations. If a single condition generates multiple alerts, the alert messages have the same
alert-id value.