To configure filtering and grouping of events in the Incident manager, do the following:
Set the Process all filtered checkbox (2) if it is necessary to block events in a filtered group for processing by other operators in case if one operator has already started processing an event from the group. When the checkbox is set, all events of the filtered group, including new incoming events, will be available for processing by only one operator until he finishes processing all the events of the group. Other operators will not be able to take events from this filter for processing — when they try to do that, the warning message "Group is blocked" will be displayed.
If the operator took one event from the filter for processing and released it without processing, then the events blocked by the filter become released for other operators. |