Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Section


Column
width50%


Panel
borderColor#CCCCCC
bgColor#FFFFFF
titleBGColor#F0F0F0
borderStylesolid
titleOn this page:
Table of Contents



Column



Tip

Incident manager interface description

Information about Incident manager events is displayed in the events table located in the upper part of the window interface:

Image Added

You can group, filter, and sort the events. The list displays the event status, and you can take the event into processing from there (see Events processing).

When you open the Incident manager, the events Monitoring mode opens by default, which displays only current events that require processing. To view all Incident manager events, go to the Archive.

Viewing current events

The following information is displayed for each event by default:

  1. Indicator of the presence of the camera associated with the event .
  2. Incident handler — the handler—the name of the Incident handler that will process the event.
  3. Event status.
  4. Object type.
  5. Object ID.
  6. Object name.
  7. Action — description Action—description of the event.
  8. Time the event occurredoccurs.
  9. Priority.
  10. Computer — the Computer—the name of the computer from which the event was is received.
  11. Time (sec) — the —the number of seconds since the event occurredoccurs.
  12. Last comment — only comment—only the last comment entered while processing the event.
  13. All comments—all comments — all comments entered while processing the event.

Image Modified

To change the displayed information columns, do the following:

  1. Click the button (1).
    Image Modified
  2. Set the checkboxes next to the columns you want to display (2). To set checkboxes for all columns at once, click the Select all button (3), ; to clear the checkboxes, click the Deselect all button (4).
  3. Click the Apply button (5). To cancel the changes, click the Cancel button (6).

Event statuses

By default, an event has an empty the Waiting for handling status in the Incident manager. Eventually, an event may receive the following statuses depending on the operator's actions (see Events processing):

  1. Acknowledged. This status is displayed if an event is taken into processing and is currently being processed.
  2. Suspended. This status is displayed if event processing was started and not completed but suspended.
  3. Taken by others/<Last name of the operator who took the event into processing>. This status is displayed if the event is being processed by another operator. 
  4. Suspended by others. This status is displayed if event processing was started and not completed but suspended by another operator.
  5. Escalated. This status is displayed if the event was escalated to another operator. The following options are available:
    1. Escalated/Suspended by others — status —status immediately after escalation.
    2. Escalated/Taken by others — the —the escalated event was taken into processing by another operator.

      Info
      titleNote

      Depending on the Incident manager settings, when an event is escalated, it may not change its status , but disappear from the list for the person who escalated the event.

  6. Escalated/<Last name of the operator who escalated the event>. This status is displayed to the operator to whom the event was escalated.
  7. Escalated/Acknowledged. This status is displayed to the operator to whom the event was escalated when he took it into processing.

...

If event grouping in the list is enabled in the settings (see Configuring the events grouping in Incident manager), then the events in the list will be are grouped by object type / object ID / event type / logic ID.

...

Depending on the settings, when you expand a group, either the first event or all events in the group will be are displayed.

Sorting events

To sort events alphabetically, click on the name of the required column.

...

  1. Click the Filters button (1).
  2. Apply the filter in one of the following ways:
    1. Set the checkboxes next to those values in the column values columns by which you want to filter out the events (2). As a result, only those objects that match all the filter criteria at the same time are displayed. To clear all selected checkboxes, click the Reset button (4).

      Info
      titleNote

      In order to display the events assigned to the current Operator or other Operators, it is necessary to set the checkbox next to the Assigned to me or Assigned to others value in the Assigned column, respectively. In order to display the events assigned to both the current Operator and other Operators, set the checkboxes next to both the Assigned to me and Assigned to others values.

    2. In the Text filter field, enter the object name, object ID, or the action of the event (for example, Activated), by which you want to filter out the events (3). It is not isn't necessary to enter the full object name, object ID, or action. The filter will display displays all found matches based on the value entered in the Text filter field. To delete the entered value, click the Cancel button (5).
    3. Apply the filter using both the checkboxes and text at the same time. To do this, enter the object name, object ID, or the action of the event (3) in the Text filter field. Then , and set the checkboxes next to the column values by which you want to filter out the events (2). As a result, events that match both the entered text and the selected checkboxes are filtered out. To clear all selected checkboxes and delete the entered value in the field, click the Cancel button (5).
  3. Click the Apply button (6).

As a result, only those objects and events that match all the filter criteria at the same time will be displayedselected filter criteria are displayed. For example, if you set the checkboxes next to the Acknowledged and Assigned to me statuses, then all work events that are assigned to the current user are displayed.

Info
titleNote

If you set all the checkboxes in the Statuses column, it means the same as if none is set. The same applies to the Assigned column.

Example of applying the event filter by object ID:

Info
titleNote

You can also configure the filter using the SETUP_FILTER reaction in the IIDK interface (see INC_MANAGER Incident manager).

Anchor
events_archive
events_archive
Events archive

To go to the events archive, click the Image Added button on the top panel. As a result, a list of archived events opens:

Image Added

In the events archive mode, you can do the same actions as in the events Monitoring mode: apply filters, use the Close and Close all buttons, generate an interim report, and select columns to display them in the table. Besides that, on the top panel you can set the parameters for displaying the archive:

Image Added

where:

  • the period for displaying the archived events is specified by the date and time of its beginning (1) and end (2);
  • the Refresh button is used to update the events list if the display period has changed (3);
  • item 6 is the number of the displayed page;
  • item 7 is the total number of pages;
  • buttons < and > are used to go to the previous/next page (5 and 8);
  • buttons << and >> are used to go to the first/last page (4 and 9).

To return to current events, click the Image Added button.