Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Information about Incident manager events is displayed in the events table located in the upper part of the window.:

Image Added

You can group, filter, and sort the events. The list displays the event status, and you can take the event into processing from there (see Processing events).

...

  1. Indicator of the presence of the camera associated with the event .
  2. Incident handler — the handler—the name of the Incident handler that will process the event.
  3. Event status.
  4. Object type.
  5. Object ID.
  6. Object name.
  7. Action — description Action—description of the event.
  8. Time the event occurred.
  9. Priority.
  10. Computer — the Computer—the name of the computer from which the event was received.
  11. Time (sec) — the —the number of seconds since the event occurred.
  12. Last comment — only comment—only the last comment entered while processing the event.
  13. All comments — all comments—all comments entered while processing the event.

Image Modified

To change the displayed information columns, do the following:

  1. Click the button (1).
    Image Modified
  2. Set the checkboxes next to the columns you want to display (2). To set checkboxes for all columns at once, click the Select all button (3), to clear the checkboxes, click the Deselect all button (4).
  3. Click the Apply button (5). To cancel the changes, click the Cancel button (6).

Event statuses

By default, an event has an empty the Waiting for handling status in the Incident manager. Eventually, an event may receive the following statuses, depending on the operator actions (see Processing events):

  1. Acknowledged. This status is displayed if an event is taken into processing and is currently being processed.
  2. Suspended. This status is displayed if event processing was started and not completed but suspended.
  3. Taken by others/<Last name of the operator who took the event into processing>. This status is displayed if the event is being processed by another operator. 
  4. Suspended by others. This status is displayed if event processing was started and not completed but suspended by another operator.
  5. Escalated. This status is displayed if the event was escalated to another operator. The following options are available:
    1. Escalated/Suspended by others — status —status immediately after escalation.
    2. Escalated/Taken by others — the —the escalated event was taken into processing by another operator.

      Info
      titleNote

      Depending on the Incident manager settings, when an event is escalated, it may not change its status, but disappear from the list for the person who escalated the event.


  6. Escalated/<Last name of the operator who escalated the event>. This status is displayed to the operator to whom the event was escalated.
  7. Escalated/Acknowledged. This status is displayed to the operator to whom the event was escalated when he took it into processing.

...

  • the period for displaying the archived events is specified by the date and time of its beginning (1) and end (2);
  • the Refresh button is used to update the events list if the display period has changed (3);
  • item 6 is the number of the displayed page;
  • item 7 is the total number of pages;
  • buttons < and > are used to go to the previous/next page (5 and 8);
  • buttons << and >> are used - to go to the first/last page (4 and 9).

...