Go to documentation repository
The logic of event handling is a sequence of actions that should be performed by an operator when processing an event in the Incident manager.
6 elements are used to perform the actions:
The number of elements that can be used in the logic and the number of actions that the operator should perform are not limited. After the operator performed any action, the next action that should be performed is set in the element settings; a macro can be executed as well, if necessary. The sequence of actions can be determined by the operator's actions in the previous steps.
Create and configure the logic as follows:
Select Deny, so that when this element appears, the operator cannot switch to processing another event until the operator moves to the element with the Allow value or completes processing the event (default);
Select Allow, so that when this element appears, the operator can proceed to processing another event.
Select the element that will be displayed first for the operator when processing the event. To do this:
Click the OK button.
As a result, a check mark will be displayed next to the selected element in the Starting column of the element table.
Note
If the starting element is not selected, then it will be the first element in the list.
The logic of event handling is configured. To delete a logic, select it in the list of logics (4) and click the - button (3).
Note
The logic of event handling is applied to an event at the moment when the event gets into the Incident handler and is displayed in the Incident manager. Accordingly, if you change the logic, the updated logic will be applied to the events that occurred after it was changed. If a group processing of the events is enabled, the updated logic will be applied to a new group of the events after the existing group is closed.