An action list contains the actions to be initiated when a specific alert is raised, acknowledged, or cleared. An alert (AL) event report causes an action list to be executed either implicitly through its ALERTID attribute or explicitly by specifying the EXT_ACTION_LIST attribute.
Implicitly If an alert event report has no EXT_ACTION_LIST attribute, the name of the action list must match the alert identifier. Note that any alert raised by Operations Sentinel itself does not include an EXT_ACTION_LIST.
This Help document contains a list of alert identifiers for conditions detected by Operations Sentinel along with a description of each condition. These alert identifiers are also included as action lists in the alert policy SpAlert x.y.z, which is released with Operations Sentinel (x.y.z is the release level). No actions are defined for any of these action lists; therefore, unless you modify this alert policy, activating it does not cause any additional notification to occur. You might want to copy some or all of the action lists from SpAlert x.y.z to alert policies you create.
Explicitly If an alert event report has an EXT_ACTION_LIST attribute, the name of the action list must match the value specified for EXT_ACTION_LIST.
For every alert policy, the following two action lists always exist and are displayed first in the navigation and detail panes. They cannot be deleted or renamed.
<default> This action list contains a list of actions to be performed for any alert that does not match a specific action list in the alert policy when that alert is raised, acknowledged, and cleared. These actions are performed in addition to any <global> actions that might also be specified.
<global> This action list contains a list of actions to be performed for every alert when it is raised, acknowledged, and cleared. These actions are performed in addition to any that are specified for specific alerts, or in addition to any <default> actions.