Go to documentation repository
To start processing an event, do the following:
After that, the first element will be displayed in the event handling interface. After processing each element, the next element will be displayed. The last element will always be the button. There are six different types of elements available:
Comment. To continue processing the event, enter a comment and click the button.
Note
Depending on the Incident manager settings, the comment can be filled in automatically and blocked from editing.
Image. To continue processing the event, add an image and click the button. The text on the button depends on the Administrator settings. In the example below, it is the Next button. The following options for working with an element are available:
The element already displays the image specified by the settings or the image from the camera or the map associated with the event. The event can be associated with several cameras. In this case, the images are generated from each camera, and you need to select one image. To do this, use the following buttons:
to update the image, click the + button (1) (the image from the camera or the map will be added at the moment when the event occurred. The button is applicable if the image has been deleted or needs to be updated, for example);
to delete the image, click the - button (2);
to scroll through the images, use the < and > buttons (5, 6).
The field (3) displays the number of the selected image, the field (4) displays the total number of added images. To go to a specific image, enter its number in the field (3).
Note
An event with the Acknowledged status is available for processing only by the operator who took it. To release an event without processing, right-click the event and select Release:
After you complete all the stages, the event processing interface will close and, if it was specified in the logic settings, a report will be displayed indicating the actions and the user who performed them (see Interim report).
If the Operator proceeds to process another event without completing the processing of the current event, the event will have the Suspended status, and the processing elements will become inactive. In this case, the event will be unavailable for processing by other operators.
The operator can independently suspend the processing of an event if the appropriate permissions are given (see Configuring user rights in Incident manager). To do this, right-click on the event and select Suspend:
To continue processing the paused event, right-click on the event in the table again and select Acknowledge.
The ability to escalate an event for processing by another operator of the system can be enabled in the settings—escalating (see Configuring user rights in Incident manager). Escalate the event manually as follows:
Click Escalate and in the drop-down list, select who to escalate the event to:
All—the escalated event can be taken into processing by any user;
Specific user from the list—the escalated event will be assigned to this particular user.
If the option to see and work with the escalated events isn't configured in the settings (see Configuring user rights in Incident manager), after escalation, the event will disappear from the list and will be displayed for another operator with the Escalated/<Last name of the operator who escalated it> status. In this case, the event will be in the state that was at the time of escalation: if the operator started processing, then the event will be at an unfinished stage of processing.
Additionally, the events can start escalating automatically after specified time (see Selecting events to display and handle). In this case, the automatically escalated event will become unavailable for processing by the current operator and will be displayed with the Escalated/Waiting for processing status.
Processing an event group is possible if it is enabled in the Configuring the events grouping in Incident manager. Possible options:
If the operator processes an event from a group, all events of this group will be blocked for other operators, and new events of the group will automatically change their status. In other words, all events of the selected group, including incoming new events, will be available for processing only to one operator until they process all events of the group. Other operators won’t be able to process events from this group. When they try to process an event from this group, a message "Group is blocked" will be displayed.
Note
If the operator took one event from a group into processing and released it without processing, the blocked events of the group are released again for other operators.
The color of the group name can also change during group processing, see Grouping events.
If the ability to close events without processing them is enabled in the settings (see Configuring user rights in Incident manager), then 2 buttons are displayed in the upper right corner of the events table:
Event statuses are described on the Event information page.