This document defines standard EventTypes. They are represented in the AddressSpaceas ObjectTypes. The EventTypesare already defined in OPC 10000-3. The following subclauses specify their representation in the AddressSpace.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 23.

Table 23– BaseEventType definition

Attribute

Value

BrowseName

BaseEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the BaseObjectTypedefined in 6.2

HasProperty

Variable

EventId

ByteString

PropertyType

Mandatory

HasProperty

Variable

EventType

NodeId

PropertyType

Mandatory

HasProperty

Variable

SourceNode

NodeId

PropertyType

Mandatory

HasProperty

Variable

SourceName

String

PropertyType

Mandatory

HasProperty

Variable

Time

UtcTime

PropertyType

Mandatory

HasProperty

Variable

ReceiveTime

UtcTime

PropertyType

Mandatory

HasProperty

Variable

LocalTime

TimeZoneDataType

PropertyType

Optional

HasProperty

Variable

Message

LocalizedText

PropertyType

Mandatory

HasProperty

Variable

Severity

UInt16

PropertyType

Mandatory

HasProperty

Variable

ConditionClassId

NodeId

PropertyType

Optional

HasProperty

Variable

ConditionClassName

LocalizedText

PropertyType

Optional

HasProperty

Variable

ConditionSubClassId

NodeId[]

PropertyType

Optional

HasProperty

Variable

ConditionSubClassName

LocalizedText[]

PropertyType

Optional

Conformance Units

Address Space Events

EventIdis generated by the Serverto uniquely identify a particular Event Notification. The Serveris responsible to ensure that each Eventhas its unique EventId. It may do this, for example, by putting GUIDs into the ByteString. Clients can use the EventIdto assist in minimizing or eliminating gaps and overlaps that may occur during a redundancy failover. The EventIdshall always be returned as value and the Serveris not allowed to return a StatusCodefor the EventIdindicating an error.

EventTypedescribes the specific type of Event. The EventTypeshall always be returned as value and the Serveris not allowed to return a StatusCodefor the EventTypeindicating an error.

TheSourceNode Property identifies the Nodethat the Eventoriginated from. If the Eventis not specific to a Nodethe NodeIdis set to null. Some subtypes of this BaseEventTypemay define additional rules for the SourceNode Property.

SourceNameprovides a description of the source of the Event. This could be the string-part of the DisplayNameof the Eventsource using the default locale of the server, if the Eventis specific to a Node,or some server-specific notation.

Timeprovides the time the Eventoccurred. This value is set as close to the event generator as possible. It often comes from the underlying system or device. Once set, intermediate OPC UA Serversshall not alter the value.

ReceiveTimeprovides the time the OPC UA Serverreceived the Eventfrom the underlying device of another Server. ReceiveTimeis analogous to ServerTimestampdefined in OPC 10000-4, i.e. in the case where the OPC UA Servergets an Eventfrom another OPC UA Server, each Serverapplies its own ReceiveTime. That implies that a Clientmay get the same Event,having the same EventId, from different Servershaving different values of the ReceiveTime. The ReceiveTimeshall always be returned as value and the Serveris not allowed to return a StatusCodefor the ReceiveTimeindicating an error.

LocalTimeis a structure containing the Offset and the DaylightSavingInOffset flag. The Offset specifies the time difference (in minutes) between the Time Propertyand the time at the location in which the event was issued. If DaylightSavingInOffset is TRUE, then Standard/Daylight savings time (DST) at the originating location is in effect and Offset includes the DST correction. If FALSE then the Offset does not include DST correction and DST may or may not have been in effect.

Messageprovides a human-readable and localizable text description of the Event. The Servermay return any appropriate text to describe the Event. A null string is not a valid value; if the Serverdoes not have a description, it shall return the string part of the BrowseNameof the Nodeassociated with the Event.

Severityis an indication of the urgency of the Event. This is also commonly called "priority". Values will range from 1 to 1 000, with 1 being the lowest severity and 1 000 being the highest. Typically, a severity of 1 would indicate an Eventwhich is informational in nature, while a value of 1 000 would indicate an Eventof catastrophic nature, which could potentially result in severe financial loss or loss of life.

It is expected that very few Serverimplementations will support 1 000 distinct severity levels. Therefore, Serverdevelopers are responsible for distributing their severity levels across the 1 to 1 000 range in such a manner that clients can assume a linear distribution. For example, a client wishing to present five severity levels to a user should be able to do the following mapping:

Client Severity

OPC Severity

HIGH

801 to 1 000

MEDIUM HIGH

601 to 800

MEDIUM

401 to 600

MEDIUM LOW

201 to 400

LOW

1 to 200

In many cases a strict linear mapping of underlying source severities to the OPC Severity range is not appropriate. The Serverdeveloper will instead intelligently map the underlying source severities to the 1 to 1 000 OPC Severity range in some other fashion. In particular, it is recommended that Serverdevelopers map Eventsof high urgency into the OPC severity range of 667 to 1 000, Eventsof medium urgency into the OPC severity range of 334 to 666 and Eventsof low urgency into OPC severities of 1 to 333.

For example, if a source supports 16 severity levels that are clustered such that severities 0 to 2 are considered to be LOW, 3 to 7 are MEDIUM and 8 to 15 are HIGH, then an appropriate mapping might be as follows:

OPC Range

Source Severity

OPC Severity

HIGH (667 to 1 000)

15

1 000

14

955

13

910

12

865

11

820

10

775

9

730

8

685

MEDIUM (334 to 666)

7

650

6

575

5

500

4

425

3

350

LOW (1 to 333)

2

300

1

150

0

1

Some Serversmight not support any Eventswhich are catastrophic in nature, so they may choose to map all of their severities into a subset of the 1 to 1 000 range (for example, 1 to 666). Other Serversmight not support any Eventswhich are merely informational, so they may choose to map all of their severities into a different subset of the 1 to 1 000 range (for example, 334 to 1 000).

The purpose of this approach is to allow clients to use severity values from multiple Serversfrom different vendors in a consistent manner. Additional discussions of severity can be found in OPC 10000-9.

ConditionClassIdspecifies in which domain this Eventis used. It is the NodeIdof the corresponding subtype of BaseConditionClassType. See OPC 10000-9for the definition of ConditionClassand a set of ConditionClassesdefined in this standard. When using this Propertyfor filtering, Clientshave to specify all individual subtypes of BaseConditionClassType NodeIds. The OfTypeoperator cannot be applied. BaseConditionClassTypeis used as class whenever an Eventcannot be assigned to a more concrete class.

ConditionClassNameprovides the DisplayNameof the of the ConditionClassType provided in the ConditionClassId.

ConditionSubClassIdspecifies additional class[es] that apply to the Event. It is the NodeIdof the corresponding subtype of BaseConditionClassType. See OPC 10000-9for the definition of ConditionClassand a set of ConditionClassesdefined in this standard. When using this Propertyfor filtering, Clientshave to specify all individual sub types of BaseConditionClassType NodeIds. The OfType operator cannot be applied. The Clientspecifies a NULL in the filter, to return Eventswhere no sub class is applied. When returning Events, if this optional field is not available in an Event, a NULL shall be returned for the field.

ConditionSubClassNameprovides the DisplayName[s] of the ConditionClassType[s] listed in the ConditionSubClassId.

The BrowseNames of the ConditionClassId, ConditionClassName, ConditionSubClassId, and ConditionSubClassName Properties originated from OPC 10000-9. They have now been generalized to also apply to Events, however to preserve backward compatibility the names have been preserved.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 24.

Table 24– AuditEventType definition

Attribute

Value

BrowseName

AuditEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the BaseEventTypedefined in 6.4.2, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

ActionTimeStamp

UtcTime

PropertyType

Mandatory

HasProperty

Variable

Status

Boolean

PropertyType

Mandatory

HasProperty

Variable

ServerId

String

PropertyType

Mandatory

HasProperty

Variable

ClientAuditEntryId

String

PropertyType

Mandatory

HasProperty

Variable

ClientUserId

String

PropertyType

Mandatory

Conformance Units

Auditing Connections

Auditing NodeManagement

Auditing History Services

Auditing Write

Auditing Method

This EventTypeinherits all Propertiesof the BaseEventType. Their semantic is defined in 6.4.2.

ActionTimeStampidentifies the time the user initiated the action that resulted in the AuditEventbeing generated. It differs from the Time Propertybecause this is the time the server generated the AuditEventdocumenting the action.

Statusidentifies whether the requested action could be performed (set Statusto TRUE) or not (set Statusto FALSE).

ServerIduniquely identifies the Servergenerating the Event. It identifies the Serveruniquely even in a server-controlled transparent redundancy scenario where several Serversmay use the same URI.

ClientAuditEntryIdcontains the human-readable AuditEntryIddefined in OPC 10000-4. If the Serveris unable to decrypt AuditEntryIddue to a certificate check failure, then some Clientidentification should be used such as the Client’sIP Address, port, MAC address and/or DNS name as the ClientAuditEntryId.

The ClientUserIdidentifies the user of the client requesting an action. The ClientUserIdcan be obtained from the UserIdentityTokenpassed in the ActivateSessioncall. If the UserIdentityToken is aUserNameIdentityTokenthen the ClientUserId is the UserName.If the UserIdentityToken is anX509IdentityTokenthen the ClientUserId is the X509 Subject Name of the Certificate. If the UserIdentityTokenis anIssuedIdentityTokenthen the ClientUserId shall be a string that represents the owner of the token. The best choice for the string depends on the type of IssuedIdentityToken.If an AnonymousIdentityTokenwas used, the value is null. For a SessionlessInvoke Serviceinvocation the ClientUserId shall be a string that represents the owner of the authenticationTokenin the requestHeader of theService invocation such as the name field of a JWT IssuedIdentityToken.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 25.

Table 25– AuditSecurityEventType definition

Attribute

Value

BrowseName

AuditSecurityEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditEventType defined in 6.4.3, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

StatusCodeId

StatusCode

PropertyType

Optional

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditEventType. Their semantic is defined in 6.4.3.

The optional StatusCodeId Propertyprovides the exact security error responsible for producing the Event.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 26.

Table 26– AuditChannelEventType definition

Attribute

Value

BrowseName

AuditChannelEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditSecurityEventType defined in 6.4.4, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

SecureChannelId

String

PropertyType

Mandatory

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditSecurityEventType. Their semantic is defined in 6.4.4. The SourceNode Propertyfor Eventsof this type shall be assigned to the Server Object. The SourceNamefor Eventsof this type shall be "SecureChannel/" and the Servicethat generates the Event(e.g. SecureChannel/OpenSecureChannelor SecureChannel/CloseSecureChannel). If the ClientUserId is not available for a CloseSecureChannelcall, then this parameter shall be set to "System/CloseSecureChannel".

The SecureChannelIdshall uniquely identify the SecureChannel. The application shall use the same identifier in all AuditEventsrelated to the Session Service Set (AuditCreateSessionEventType, AuditActivateSessionEventType and their subtypes) and the SecureChannel Service Set (AuditChannelEventType and its subtypes).

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 27.

Table 27– AuditOpenSecureChannelEventType definition

Attribute

Value

BrowseName

AuditOpenSecureChannelEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditChannelEventTypedefined in 6.4.5, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

ClientCertificate

ByteString

PropertyType

Mandatory

HasProperty

Variable

ClientCertificateThumbprint

String

PropertyType

Mandatory

HasProperty

Variable

RequestType

SecurityTokenRequestType

PropertyType

Mandatory

HasProperty

Variable

SecurityPolicyUri

String

PropertyType

Mandatory

HasProperty

Variable

SecurityMode

MessageSecurityMode

PropertyType

Mandatory

HasProperty

Variable

RequestedLifetime

Duration

PropertyType

Mandatory

HasProperty

Variable

CertificateErrorEventId

String

PropertyType

Optional

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditChannelEventType. Their semantic is defined in 6.4.5. The SourceNamefor Eventsof this type shall be "SecureChannel/OpenSecureChannel". The ClientUserId is not available for this call, thus this parameter shall be set to "System/OpenSecureChannel".

The additional Propertiesdefined for this EventTypereflect parameters of the Servicecall that triggers the Event.

ClientCertificateis the clientCertificate parameter of the OpenSecureChannel Servicecall.

ClientCertificateThumbprint is a thumbprint of the ClientCertificate. See OPC 10000-6for details on thumbprints.

RequestTypeis the requestType parameter of the OpenSecureChannel Servicecall.

SecurityPolicyUriis the securityPolicyUri parameter of the OpenSecureChannel Servicecall.

SecurityModeis the securityMode parameter of the OpenSecureChannelServicecall.

RequestedLifetimeis the requestedLifetime parameter of the OpenSecureChannelServicecall.

CertificateErrorEventIdis the EventIdof the corresponding AuditCertificateEventType Eventused to report a certificate error.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 28.

Table 28– AuditSessionEventType definition

Attribute

Value

BrowseName

AuditSessionEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditSecurityEventTypedefined in 6.4.4, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

SessionId

NodeId

PropertyType

Mandatory

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditSecurityEventType. Their semantic is defined in 6.4.4.

If the Eventis generated by a TransferSubscriptions Servicecall, the SourceNode Propertyshall be assigned to the SessionDiagnostics Objectthat represents the session. The SourceNamefor Eventsof this type shall be "Session/TransferSubscriptions".

Otherwise, the SourceNode Propertyfor Eventsof this type shall be assigned to the Server Object. The SourceNamefor Eventsof this type shall be "Session/" and the Serviceor cause that generates the Event(e.g. CreateSession, ActivateSessionor CloseSession).

The SessionIdshall contain the SessionIdof the session that the Servicecall was issued on In the CreateSession Servicethis shall be set to the newly created SessionId. If no session context exists (e.g. for a failed CreateSession Servicecall) the SessionIdshall be null.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 29.

Table 29– AuditCreateSessionEventType definition

Attribute

Value

BrowseName

AuditCreateSessionEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditSessionEventTypedefined in 6.4.7, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

SecureChannelId

String

PropertyType

Mandatory

HasProperty

Variable

ClientCertificate

ByteString

PropertyType

Mandatory

HasProperty

Variable

ClientCertificateThumbprint

String

PropertyType

Mandatory

HasProperty

Variable

RevisedSessionTimeout

Duration

PropertyType

Mandatory

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditSessionEventType. Their semantic is defined in 6.4.7. The SourceNamefor Eventsof this type shall be "Session/CreateSession". The ClientUserId is not available for this call thus this parameter shall be set to the "System/CreateSession".

The additional Propertiesdefined for this EventTypereflect parameters of the Servicecall that triggers the Event.

SecureChannelIdshall uniquely identify the SecureChannel. The application shall use the same identifier in all AuditEventsrelated to the Session Service Set (AuditCreateSessionEventType, AuditActivateSessionEventType and their subtypes) and the SecureChannel Service Set (AuditChannelEventType and its subtypes).

ClientCertificateis the clientCertificate parameter of the CreateSession Servicecall.

ClientCertificateThumbprint is a thumbprint of the ClientCertificate. See OPC 10000-6for details on thumbprints.

RevisedSessionTimeoutis the returned revisedSessionTimeout parameter of the CreateSession Servicecall.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 30.

Table 30– AuditUrlMismatchEventType definition

Attribute

Value

BrowseName

AuditUrlMismatchEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditCreateSessionEventType defined in 6.4.8which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

EndpointUrl

String

PropertyType

Mandatory

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditSessionEventType. Their semantic is defined in 6.4.8.

The additional Propertiesdefined for this EventTypereflect parameters of the Servicecall that triggers the Event.

EndpointUrlis the endpointUrl parameter of the CreateSession Servicecall.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 31.

Table 31– AuditActivateSessionEventType definition

Attribute

Value

BrowseName

AuditActivateSessionEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditSessionEventTypedefined in 6.4.7, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

ClientSoftwareCertificates

SignedSoftwareCertificate[]

PropertyType

Mandatory

HasProperty

Variable

UserIdentityToken

UserIdentityToken

PropertyType

Mandatory

HasProperty

Variable

SecureChannelId

String

PropertyType

Mandatory

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditSessionEventType. Their semantic is defined in 6.4.7. The SourceNamefor Eventsof this type shall be "Session/ActivateSession".

The additional Propertiesdefined for this EventTypereflect parameters of the Servicecall that triggers the Event.

ClientSoftwareCertificatesis the clientSoftwareCertificates parameter of the ActivateSession Servicecall.

UserIdentityTokenreflects the userIdentityToken parameter of the ActivateSession Servicecall. For Username/Password tokens the password shall not be included.

SecureChannelIdshall uniquely identify the SecureChannel. The application shall use the same identifier in all AuditEventsrelated to the Session Service Set (AuditCreateSessionEventType, AuditActivateSessionEventType and their subtypes) and the SecureChannel Service Set (AuditChannelEventType and its subtypes).

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 32.

Table 32– AuditCancelEventType definition

Attribute

Value

BrowseName

AuditCancelEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditSessionEventTypedefined in 6.4.7, i.e. inheriting the InstanceDeclarations of that Node.

HasProperty

Variable

RequestHandle

UInt32

PropertyType

Mandatory

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditSessionEventType. Their semantic is defined in 6.4.7. The SourceNamefor Eventsof this type shall be "Session/Cancel".

The additional Propertiesdefined for this EventTypereflect parameters of the Servicecall that triggers the Event.

RequestHandleis the requestHandle parameter of the Cancel Servicecall.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 33.

Table 33– AuditCertificateEventType definition

Attribute

Value

BrowseName

AuditCertificateEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditSecurityEventTypedefined in 6.4.7, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

Certificate

ByteString

PropertyType

Mandatory

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditSecurityEventType. Their semantic is defined in 6.4.4. The SourceNamefor Eventsof this type shall be "Security/Certificate".

Certificateis any certificate validated by a Serverthat encountered a validation issue (i.e. users, applications, etc.). Additional subtypes of this EventTypewill be defined representing the individual validation errors. This certificate can be matched to the Servicethat passed it (Session or SecureChannel Service Set) since the AuditEventsfor these Servicesalso included the Certificate.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 34.

Table 34– AuditCertificateDataMismatchEventType definition

Attribute

Value

BrowseName

AuditCertificateDataMismatchEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditCertificateEventType defined in 6.4.12, i.e. inheriting the InstanceDeclarations of that Node.

HasProperty

Variable

InvalidHostname

String

PropertyType

Mandatory

HasProperty

Variable

InvalidUri

String

PropertyType

Mandatory

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditCertificateEventType. Their semantic is defined in 6.4.12. The SourceNamefor Eventsof this type shall be "Security/Certificate".

InvalidHostnameis the string that represents the host name passed in as part of the URL that is found to be invalid. If the host name was not invalid it can be null.

InvalidUriis the URI that was passed in and found to not match what is contained in the certificate. If the URI was not invalid it can be null.

Either the InvalidHostnameor InvalidUri shall be provided.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 35.

Table 35– AuditCertificateExpiredEventType definition

Attribute

Value

BrowseName

AuditCertificateExpiredEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditCertificateEventTypedefined in 6.4.12, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditCertificateEventType. Their semantic is defined in 6.4.12. The SourceNamefor Eventsof this type shall be "Security/Certificate". The Message Variableshall include a description of why the certificate was expired (i.e. time before start or time after end). There are no additional Propertiesdefined for this EventType.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 36.

Table 36– AuditCertificateInvalidEventType definition

Attribute

Value

BrowseName

AuditCertificateInvalidEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditCertificateEventTypedefined in 6.4.12, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditCertificateEventType. Their semantic is defined in 6.4.12. The SourceNamefor Eventsof this type shall be "Security/Certificate". The Messageshall include a description of why the certificate is invalid. There are no additional Propertiesdefined for this EventType.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 37.

Table 37– AuditCertificateUntrustedEventType definition

Attribute

Value

BrowseName

AuditCertificateUntrustedEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditCertificateEventTypedefined in 6.4.12, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditCertificateEventType. Their semantic is defined in 6.4.12. The SourceNamefor Eventsof this type shall be "Security/Certificate". The Message Variableshall include a description of why the certificate is not trusted. If a trust chain is involved then the certificate that failed in the trust chain should be described. There are no additional Propertiesdefined for this EventType.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 38.

Table 38– AuditCertificateRevokedEventType definition

Attribute

Value

BrowseName

AuditCertificateRevokedEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditCertificateEventTypedefined in 6.4.12, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditCertificateEventType. Their semantic is defined in 6.4.12. The SourceNamefor Eventsof this type shall be "Security/Certificate". The Message Variableshall include a description of why the certificate is revoked (was the revocation list unavailable or was the certificate on the list). There are no additional Propertiesdefined for this EventType.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 39.

Table 39– AuditCertificateMismatchEventType definition

Attribute

Value

BrowseName

AuditCertificateMismatchEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditCertificateEventTypedefined in 6.4.12, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Auditing Connections

This EventTypeinherits all Propertiesof the AuditCertificateEventType. Their semantic is defined in 6.4.12. The SourceNamefor Eventsof this type shall be "Security/Certificate". The Message Variableshall include a description of misuse of the certificate. There are no additional Propertiesdefined for this EventType.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 40.

Table 40– AuditNodeManagementEventType definition

Attribute

Value

BrowseName

AuditNodeManagementEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditEventTypedefined in 6.4.3, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Auditing NodeManagement

This EventTypeinherits all Propertiesof the AuditEventType. Their semantic is defined in 6.4.3. There are no additional Propertiesdefined for this EventType. The SourceNode Propertyfor Eventsof this type shall be assigned to the Server Object. The SourceNamefor Eventsof this type shall be "NodeManagement/" and the Servicethat generates the Event(e.g. AddNodes, AddReferences, DeleteNodes, DeleteReferences).

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 41.

Table 41– AuditAddNodesEventType definition

Attribute

Value

BrowseName

AuditAddNodesEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditNodeManagementEventTypedefined in 6.4.19, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

NodesToAdd

AddNodesItem[]

PropertyType

Mandatory

Conformance Units

Auditing NodeManagement

This EventTypeinherits all Propertiesof the AuditNodeManagementEventType. Their semantic is defined in 6.4.19. The SourceNamefor Eventsof this type shall be "NodeManagement/AddNodes".

The additional Propertiesdefined for this EventTypereflect parameters of the Servicecall that triggers the Event.

NodesToAddis the NodesToAdd parameter of the AddNodes Servicecall.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 42.

Table 42– AuditDeleteNodesEventType definition

Attribute

Value

BrowseName

AuditDeleteNodesEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditNodeManagementEventTypedefined in 6.4.19, i.e. inheriting the InstanceDeclarations of that Node.

HasProperty

Variable

NodesToDelete

DeleteNodesItem[]

PropertyType

Mandatory

Conformance Units

Auditing NodeManagement

This EventTypeinherits all Propertiesof the AuditNodeManagementEventType. Their semantic is defined in 6.4.19. The SourceNamefor Eventsof this type shall be "NodeManagement/DeleteNodes".

The additional Propertiesdefined for this EventTypereflect parameters of the Servicecall that triggers the Event.

NodesToDeleteis the nodesToDelete parameter of the DeleteNodes Servicecall.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 43.

Table 43– AuditAddReferencesEventType definition

Attribute

Value

BrowseName

AuditAddReferencesEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditNodeManagementEventTypedefined in 6.4.19, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

ReferencesToAdd

AddReferencesItem[]

PropertyType

Mandatory

Conformance Units

Auditing NodeManagement

This EventTypeinherits all Propertiesof the AuditNodeManagementEventType. Their semantic is defined in 6.4.19. The SourceNamefor Eventsof this type shall be "NodeManagement/AddReferences".

The additional Propertiesdefined for this EventTypereflect parameters of the Servicecall that triggers the Event.

ReferencesToAddis the referencesToAdd parameter of the AddReferences Servicecall.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 44.

Table 44– AuditDeleteReferencesEventType definition

Attribute

Value

BrowseName

AuditDeleteReferencesEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditNodeManagementEventTypedefined in 6.4.19, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

ReferencesToDelete

DeleteReferencesItem[]

PropertyType

Mandatory

Conformance Units

Auditing NodeManagement

This EventTypeinherits all Propertiesof the AuditNodeManagementEventType. Their semantic is defined in 6.4.19. The SourceNamefor Eventsof this type shall be "NodeManagement/DeleteReferences".

The additional Propertiesdefined for this EventTypereflect parameters of the Servicecall that triggers the Event.

ReferencesToDeleteis the referencesToDelete parameter of the DeleteReferences Servicecall.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 45.

Table 45– AuditUpdateEventType definition

Attribute

Value

BrowseName

AuditUpdateEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditEventTypedefined in 6.4.3, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Auditing History Services

Auditing Write

This EventTypeinherits all Propertiesof the AuditEventType. Their semantic is defined in 6.4.3. The SourceNode Propertyfor Eventsof this type shall be assigned to the NodeIdthat was changed. The SourceNamefor Eventsof this type shall be "Attribute/" and the Servicethat generated the event (e.g. Write, HistoryUpdate). Note that one Servicecall may generate several Eventsof this type, one per changed value.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 46.

Table 46– AuditWriteUpdateEventType definition

Attribute

Value

BrowseName

AuditWriteUpdateEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditUpdateEventTypedefined in 6.4.24, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

AttributeId

UInt32

PropertyType

Mandatory

HasProperty

Variable

IndexRange

NumericRange

PropertyType

Mandatory

HasProperty

Variable

NewValue

BaseDataType

PropertyType

Mandatory

HasProperty

Variable

OldValue

BaseDataType

PropertyType

Mandatory

Conformance Units

Auditing Write

This EventTypeinherits all Propertiesof the AuditUpdateEventType. The SourceNamefor Eventsof this type shall be "Attribute/Write". Their semantic is defined in 6.4.24.

AttributeIdidentifies the Attributethat was written. The SourceNode Propertyidentifies the Nodethat was written.

IndexRangeidentifies the index range of the written Attributeif the Attributeis an array. If the Attributeis not an array or the whole array was written, the IndexRangeis set to null.

NewValueidentifies the value that was written. If the IndexRangeis provided, only the values in the provided range are shown.

OldValueidentifies the value that the Attributecontained before the write. If the IndexRangeis provided, only the value of that range is shown. It is acceptable for a Serverthat does not have this information to report a null value.

Both the NewValueand the OldValuewill contain a value in the DataTypeand encoding used for writing the value.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 47.

Table 47– AuditHistoryUpdateEventType definition

Attribute

Value

BrowseName

AuditHistoryUpdateEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditUpdateEventTypedefined in 6.4.24, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

ParameterDataTypeId

NodeId

PropertyType

Mandatory

Conformance Units

Auditing History Services

This EventTypeinherits all Propertiesof the AuditUpdateEventType. Their semantic is defined in 6.4.24.

The ParameterDataTypeIdidentifies the DataTypeIdfor the extensible parameter used by the HistoryUpdate. This parameter indicates the type of HistoryUpdate being performed.

Subtypes of this EventTypeare defined in OPC 10000-11representing the different possibilities to manipulate historical data.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 48.

Table 48– AuditUpdateMethodEventType definition

Attribute

Value

BrowseName

AuditUpdateMethodEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditEventTypedefined in 6.4.3, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

MethodId

NodeId

PropertyType

Mandatory

HasProperty

Variable

InputArguments

BaseDataType[]

PropertyType

Mandatory

Conformance Units

Auditing Method

This EventTypeinherits all Propertiesof the AuditEventType. Their semantic is defined in 6.4.3. The SourceNode Propertyfor Eventsof this type shall be assigned to the NodeIdof the Objectthat the Methodresides on. The SourceNamefor Eventsof this type shall be "Attribute/Call". Note that one Servicecall may generate several Eventsof this type, one per method called. This EventTypeshould be further subtyped to better reflect the functionality of the method and to reflect changes to the address space or updated values triggered by the method.

MethodIdidentifies the method that was called.

InputArgumentsidentifies the input Arguments for the method. This parameter can be null if no input arguments where provided.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 49.

Table 49– SystemEventType definition

Attribute

Value

BrowseName

SystemEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the BaseEventTypedefined in 6.4.2, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Base Info Device Failure

Base Info System Status Underlying System

Base Info System Status

This EventTypeinherits all Propertiesof the BaseEventType. Their semantic is defined in 6.4.2. There are no additional Propertiesdefined for this EventType.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 50.

Table 50– DeviceFailureEventType definition

Attribute

Value

BrowseName

DeviceFailureEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the SystemEventTypedefined in 6.4.28, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Base Info Device Failure

This EventTypeinherits all Propertiesof the SystemEventType. Their semantic is defined in 6.4.28. There are no additional Propertiesdefined for this EventType.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 51.

Table 51– SystemStatusChangeEventType definition

Attribute

Value

BrowseName

SystemStatusChangeEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the SystemEventTypedefined in 6.4.28, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

SystemState

ServerState

PropertyType

Mandatory

Conformance Units

Base Info System Status Underlying System

Base Info System Status

This EventTypeinherits all Propertiesof the SystemEventType. Their semantic is defined in 6.4.28. The SourceNode Propertyand the SourceNameshall identify the system. The system can be the Serveritself or some underlying system.

The SystemStatespecifies the current state of the system. Changes to the ServerStateof the system shall trigger a SystemStatusChangeEvent, when the event is supported by the system.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 52.

Table 52– BaseModelChangeEventType definition

Attribute

Value

BrowseName

BaseModelChangeEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the BaseEventTypedefined in 6.4.2, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Base Info Model Change

This EventTypeinherits all Propertiesof the BaseEventType. Their semantic is defined in 6.4.2. There are no additional Propertiesdefined for this EventType. The SourceNode Propertyfor Events of this type shall be the Nodeof the Viewthat gives the context of the changes. If the whole AddressSpaceis the context, the SourceNode Propertyis set to the NodeIdof the Server Object. The SourceNamefor Eventsof this type shall be the Stringpart of the BrowseNameof the View; for the whole AddressSpaceit shall be "Server".

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 53.

Table 53– GeneralModelChangeEventType definition

Attribute

Value

BrowseName

GeneralModelChangeEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the BaseModelChangeEventTypedefined in 6.4.31, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

Changes

ModelChangeStructureDataType[]

PropertyType

Mandatory

Conformance Units

Base Info Model Change General

This EventTypeinherits all Propertiesof the BaseModelChangeEventType. Their semantic is defined in 6.4.31.

The additional Propertydefined for this EventTypereflects the changes that issued the ModelChangeEvent. It shall contain at least one entry in its array. Its structure is defined in 12.16.

This EventTypeis defined in OPC 10000-3. Its representation in the AddressSpaceis formally defined in Table 54.

Table 54– SemanticChangeEventType definition

Attribute

Value

BrowseName

SemanticChangeEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the BaseEventTypedefined in 6.4.2, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

Changes

SemanticChangeStructureDataType[]

PropertyType

Mandatory

Conformance Units

Base Info SemanticChange

This EventTypeinherits all Propertiesof the BaseEventType. Their semantic is defined in 6.4.2. The SourceNode Propertyfor Events of this type shall be the Nodeof the Viewthat gives the context of the changes. If the whole AddressSpaceis the context, the SourceNode Propertyis set to the NodeIdof the Server Object. The SourceNamefor Eventsof this type shall be the Stringpart of the BrowseNameof the View, for the whole AddressSpaceit shall be "Server".

The additional Propertydefined for this EventTypereflects the changes that issued the SemanticChangeEvent. Its structure is defined in 12.17.

EventQueueOverflow Eventsare generated when an internal queue of a MonitoredItem subscribing for Eventsin the Serveroverflows. OPC 10000-4defines when the internal EventQueueOverflow Eventsshall be generated.

The EventTypefor EventQueueOverflow Eventsis formally defined in Table 55.

Table 55– EventQueueOverflowEventType definition

Attribute

Value

BrowseName

EventQueueOverflowEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the BaseEventTypedefined in 6.4.2, which means it inherits the InstanceDeclarations of that Node.

Conformance Units

Base Info EventQueueOverflow EventType

This EventTypeinherits all Propertiesof the BaseEventType. Their semantic is defined in 6.4.2. The SourceNode Propertyfor Eventsof this type shall be assigned to the NodeIdof the Server Object. The SourceNamefor Eventsof this type shall be "Internal/EventQueueOverflow".

ProgressEventsare generated to identify the progress of an operation. An operation can be a Servicecall or something application specific like a program execution.

The EventTypefor Progress Eventsis formally defined in Table 56.

Table 56– ProgressEventType definition

Attribute

Value

BrowseName

ProgressEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the BaseEventTypedefined in 6.4.2, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

Context

BaseDataType

PropertyType

Mandatory

HasProperty

Variable

Progress

UInt16

PropertyType

Mandatory

Conformance Units

Base Info Progress Events

This EventTypeinherits all Propertiesof the BaseEventType. Their semantic is defined in 6.4.2. The SourceNode Propertyfor Eventsof this type shall be assigned to the NodeIdof the Session Object where the operation was initiated. The SourceNamefor Eventsof this type shall be "Service/<Service Name as defined in OPC 10000-4>" when the progress of a Servicecall is exposed.

The additional Property Contextcontains context information about what operation progress is reported. In the case of Servicecalls it shall be a UInt32 containing the requestHandleof the RequestHeaderof the Servicecall.

The additional Property Progresscontains the percentage completed of the progress. The value shall be between 0 and 100, where 100 identifies that the operation has been finished.

It is recommended that Serversonly expose ProgressEventsfor Servicecalls to the Sessionthat invoked the Service.

This EventTypeis used for the categorization of Eventsgenerated by a Client. Its representation in the AddressSpaceis formally defined in Table 57.

Table 57– AuditClientEventType definition

Attribute

Value

BrowseName

AuditClientEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditEventTypedefined in 6.4.3, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

ServerUri

UriString

PropertyType

Mandatory

ConformanceUnits

Base Info Client Events

This class of Audit Eventsare generated by Serversthat also support Clientfunctionality. They represent the Clientactions taken by the Server.

This EventTypeinherits all Propertiesof the AuditEventType. Their semantics are defined in 6.4.3. The SourceNode Propertyfor Eventsof this type shall be assigned to the NodeIdof the Objectthat is related to the action. If no Objectis related, then the SourceNode Propertyshall be the NodeIdof the Server Object.

ServerUriprovides the URI of the Serverthat the Clientwas accessing.

This EventTypeallows Methodcalls issued by a Clientto be audited. Its representation in the AddressSpaceis formally defined in Table 58.

Table 58– AuditClientUpdateMethodResultEventType definition

Attribute

Value

BrowseName

AuditClientUpdateMethodResultEventType

IsAbstract

False

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditClientEventType defined in 6.4.36, which means it inherits the InstanceDeclarations of that Node.

HasProperty

Variable

ObjectId

NodeId

PropertyType

Mandatory

HasProperty

Variable

MethodId

NodeId

PropertyType

Mandatory

HasProperty

Variable

StatusCodeId

StatusCode

PropertyType

Mandatory

HasProperty

Variable

InputArguments

Argument[]

PropertyType

Mandatory

HasProperty

Variable

OutputArguments

Argument[]

PropertyType

Mandatory

ConformanceUnits

Base Info Client Events

This EventTypeinherits all Propertiesof the AuditClientEventType. Their semantics are defined in 6.4.36. The SourceNamefor Eventsof this type shall be "Client/Call". A single Clientaction may generate several Eventsof this type, one per Methodcalled.

ObjectIdidentifies the Object on which the Methodwas called. The Objectmay be located on the same Serveras the calling instance or on a remote Server.

MethodIdidentifies the method that was called.

StatusCodeIdidentifies the overall status returned by the Method Call.

InputArgumentsidentifies the input Arguments for the method. This parameter can be null if no input arguments were provided.

OutputArgumentsidentifies the output Arguments of the method. This parameter can be null if no output arguments where provided.