The Incident manager interface consists of three parts:

1. Event grouping interface.
2. Table with a list of events.
3. Event handling interface.

Viewing events

The following information is displayed for each event:

1. Status.
2. Object type.
3. Object ID.
4. Object name.
5. Action.
6. Time — time the event occurred.
7. Priority.
8. Time (sec) — the number of seconds since the event occurred.
9. Last comment.

Events can be sorted by any column in forward and reverse order. To sort, click on the required column once or twice.

Filtering events

Filtering events sets the event filters by specified parameters in the table with the events list. Possible filtering options are set in the Configuring the events filtering and grouping in Incident manager:

1. null - filtering is disabled, all events are displayed in the list.
2. by region - events are filtered by region.
3. by event - events are filtered by event type.
4. by object - events are filtered by object.

After you apply the filter, the events grouped by the selected parameter will be displayed in the filtering interface. The filter name consists of the parameter and the number of events in the group:

To view the events in the group, click on its name:

Grouping events

If event grouping is enabled in the settings (see Configuring the events filtering and grouping in Incident manager), then the events will be grouped by object type / object ID / event type / logic ID.

To view the events within the group, click the button.

Depending on the settings, when you expand a group, either the first event or all events in the group will be displayed.

Event statuses

By default, an event in the Incident manager has an empty status. Eventually, an event may receive the following statuses:

1. Acknowledged. This status is displayed if an event is being processed.
2. Suspended. This status is displayed if the event processing was started but not completed.
3. Taken by others. This status is displayed if the event is being processed by another operator.
4. Suspended by others. This status is displayed if event processing was started but not completed by another operator.
5. Escalated. This status is displayed if the event was escalated by another operator.

Processing events

To start processing an event, do the following:

1. Right-click on an event in the table.
   
2. Select Acknowledge.

After that, the first element will be displayed in the event handling interface. After processing each element, the next element will be displayed. The last element will always be the button. There are 6 different types of elements available:

1. Button. To continue processing the event, click the button. If this element is the last in the logic, then after clicking the button, the event processing will be completed.
   
2. Radio button. To continue processing the event, select one of the values.
   
3. List. To continue processing the event, select the required value from the list. There can be several lists.
   
4. Checkboxes. To continue processing the event, set one or more checkboxes.
   
5. Comment. To continue processing the event, enter a comment and click the button.
   
6. Image. To continue processing the event, add images and click the bottom button (the Next button in the image below). By default, the image specified in the settings is displayed. To select another image, click the ... button; to use an image from the memory buffer, click the Paste button.
   

After you complete all the stages, the event processing interface will close and, if it was specified in the logic settings, a report will be displayed. To open a report at any time while processing an event, click the Extra button.

To print a report, click the  button, to save a report, click  and select one of the acceptable formats: XLS, PDF or DOC.

Escalating events

The ability to escalate an event for processing by another operator of the system can be enabled in the settings (see Configuring the main parameters of the Incident manager). Escalate the event as follows:

1. Right-click on an event in the table.
   

2. Select Escalate and then select the required Incident manager interface.

   The selected Incident manager should be open on the screen, otherwise the event will not be escalated.

   
   

After escalation, the event will disappear from the list and will be displayed for another operator with the Escalated status.

Closing events without processing

If the ability to close events without processing them is enabled in the settings (see Configuring the main parameters of the Incident manager), then 2 buttons are displayed in the upper right corner of the events table:

1. Close. It is used to close one event; select the required evet in the table and click this button.
2. Close all. It is used to close all events.

Displaying video and object on the map

You can view the video recording of events and highlight the object that triggered the event on the map.

To view the video, do the following:

1. Right-click on an event in the table.
   
2. Select Show video.

To highlight an object on the map, do the following:

1. Right-click on an event in the table.
   

2. Select Show on map.

   If the Incident manager is not linked with the map in the settings, then this item will not be available (see Configuring the main parameters of the Incident manager).

   
   

   As a result, the object will be briefly highlighted on the map.