Holmes sends ONSET message to DCAE_CL_OUTPUT in the format of:

{
"closedLoopEventClient": "DCAE.HolmesInstance",
"closedLoopAlarmEnd": 0,
"requestID": "f445ae22-0818-4eeb-86c1-da2ca9f02152",
"aai": {
"vserver.prov-status": "ACTIVE",
"vserver.resource-version": "1527219092334",
"vserver.is-closed-loop-disabled": false,
"vserver.vserver-id": "6e7ca8d1-863c-4cd0-8f88-e9729a69a401",
"vserver.vserver-selflink": "",
"vserver.in-maint": true,
"vserver.vserver-name": "vnfc04c6051_5f71_4154_8ca9_c32_SCU1_0",
"generic-vnf.service-instance-id": "458d4023-1a55-4df8-935b-29d828105b63",
"generic-vnf.vnf-id": "23d30844-2259-4a77-a8fb-557678b29366"
},
"from": "DCAE",
"targetType": "VM",
"closedLoopAlarmStart": 1527223250018381,
"closedLoopEventStatus": "ONSET",
"closedLoopControlName": "ControlLoop-VOLTE-2179b738-fd36-4843-a71a-a8c24c70c55b",
"version": "1.0.2",
"target": "vserver.vserver-name"
}

Section name "aai" should be "AAI" to keep consistent with R1. "aai" breaks Policy logic.