Hi Nir
Don't think we have any document for this.
But there are some info for the different sub products.
For example, CA directory have the possibility to have SNMP enabled and any monitoring program can monitor this. Most monitor programs can monitor log files and any error message in *alarm* log for directory should be triggered (DSA_E)
For provisioning you cannot blindly look for error/failure messages since those are pretty common and "part" of the logic.
For application server, any exception is worth monitoring. But here it depends on the application server type (and their configuration)
Cheers, Atle