I think you will find that quite a number of the event fields shown in the appendix of the admin guide are not instantiated at event MAPPING time. count certainly seems to be one of them. I think this is because some fields are only instantiated when the event is actually inserted in the database (like count).
Other fields that don't appear to be available are: evid stateChange dedupid eventState suppid eventClassMapping As you noted, they will report an error in $ZENHOME/log/event.log. The other thing I have observed is that if your transform expression tries to use a field that doesn't exist then the transform stops there - any subsequent lines will not be executed. You will also find that firstTime and lastTime are the same value at MAPPING time. Cheers, Jane -------------------- m2f -------------------- Read this topic online here: http://forums.zenoss.com/viewtopic.php?p=27463#27463 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
