Versions Compared

Old Version 2

changes.mady.by.user Bahdan Tsiulkou

Saved on

compared with

New Version Current

changes.mady.by.user Alena Kniazeva

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Section


Column
width50%


Panel
borderColor#CCCCCC
bgColor#FFFFFF
titleBGColor#F0F0F0
borderStylesolid
titleOn this the page:
Table of Contents



Column


...

Information about Incident manager events is displayed in the events event table located in the upper part of the windowinterface:

Image RemovedImage Added

You can group, filter, and sort the events. The list displays the event status, and you can take handle the event into processing from there (see Processing eventshere (see Event handling).

When you open the Incident manager window, the events Monitoring mode event monitoring opens by default, which displays only the current events that need to be processedrequire handling. To view all Incident events of the incident manager events, go to the the Archive.

...

View current events

The following information is displayed for each event by default:

  1. Indicator of the presence of the camera associated with the event Image Modified..
  2. #—the column displays the indicator of event locking.
    Display of locking:
    1. Locked remotely—Image Added.
    2. Locked locally—Image Added.
  3. Event ID.
  4. Handler—the Incident handler—the name of the Incident incident handler that will process handles the event.
  5. Event status.
  6. Object type.
  7. Object ID.
  8. Object name.
  9. Action—description of the event.
  10. Time the event occurredoccurs.
  11. Priority.
  12. Computer—the name of the computer from which the event was is received.
  13. Time (secs)—the number of seconds since the event occurred.
  14. Last comment—only the last comment entered while processing handling the event.
  15. All comments—all comments entered while processing handling the event.
  16. Additional information.

Image RemovedImage Added

To change the displayed information columns, do the following:

  1. Click the Image Removed Image Added button (1).
    Image RemovedImage Added
  2. Set the checkboxes next to the columns that you want to display (2). To set checkboxes for next to all columns at once, click the Select all button (3), ; to clear the checkboxes, click the Deselect all button (4).
  3. Click the Apply button (5). To cancel the changes, click the Cancel button (6).

Event statuses

By default, an event has the is sent to the incident manager with the Waiting for handling status in the Incident manager. EventuallyLater, an the event may can receive the following statuses, depending on the operator's actions (see Processing events Event handling):

  1. Acknowledged. This status is displayed if an event is taken into processing and is currently being processedhandled.
  2. Suspended. This status is displayed if event processing handling was started and not completed but , wasn't completed, and was suspended.
  3. Taken by others/<Last name of the operator who took handled the event into processing>event>. This status is displayed if the event is being processed handled by another operator. 
  4. Suspended by others. This status is displayed if event processing handling was started and not completed but , wasn't completed, and was suspended by another operator.
  5. Escalated. This status is displayed if the event was escalated is escalated to another operator.
    The following options are available:
    1. Escalated/Suspended by others—status immediately after escalation.

    2. Escalated/Taken by others—the escalated event was taken into processing is handled by another operator.

      Info
      titleNote

      Depending on the Incident incident manager settings, when an event is escalated, it may not cannot change its status , but disappear disappears from the list for the person those who escalated the event.

  6. Escalated/<Last name of the operator who escalated the event>. This status is displayed to for the operator to whom the event was is escalated.
  7. Escalated/Acknowledged. This status is displayed to for the operator to whom the event was is escalated when he took they handle it into processing.

Grouping

...

in the event list

If event grouping in the event list is enabled in the settings (see see Configuring the events event grouping in Incident incident manager), then the events in the list will be are grouped by object type/object ID/event type/logic ID.

Image RemovedImage Added

To view the events within the group, click the Image Removed Image Added button.

Depending on the settings, when you expand a group, either the first event or all events in of the group will be are displayed.

Sorting events

To sort events alphabetically, click on the name of the required column, the values of which you want to sort.

Filtering events

To filter out and display specific events, do the following:

  1. Click the Filters button (1).
    Image RemovedImage Added
  2. Apply the filter in one of the following ways:

    1. Set the checkboxes next to those values in the columns by which you want to apply the filter out the events (2). As a result, only those objects that match all the filter criteria at the same time will be are displayed. To clear all selected checkboxes, click the Reset button (45).

      Info
      titleNote

      In order If you want to display the events assigned to the current Operator operator or to other Operators, it is necessary to operators, you must set the checkbox next to the the Assigned to me or Assigned to others value in the Assigned column, respectively. In order If you want to display the events assigned to both the current Operator operator and other Operatorsoperators, set the checkboxes next to both the Assigned to me and Assigned to others values.

    2. From the Filter mode drop-down list (3), select the search criterion:
      1. All words.
      2. Any of words.
      3. Substring.
    3. In the the Text filter field, enter the object name, object ID, or the action of the event (for example, Activated) , by which you want to apply the filter out the events (34). It is not necessary You don't have to enter the full object name, object ID, or action. The filter will display displays all found matches based on the value entered in the the Text filter field. To delete the entered value, click the Cancel button (56).
    4. Apply the filter using to both the checkboxes and text at the same time. To do this, enter the object name, object ID, or the action of the event (3) in the action (4) in the Text filter field, and set the checkboxes next to the column values by which you want to apply the filter out the events (2). As a result, events that match both the entered text and the selected checkboxes will be are filtered out. To clear all selected checkboxes and delete the entered value in the field, click the Cancel button (56).
  3. Click the Apply button (67).

As a result, objects and events that match all selected filter criteria will be are displayed at a time. For example, if you set the checkboxes next to the Acknowledged and Assigned to me statuses are set, then all work in process events that are assigned to the current user will be are displayed.

Info
titleNote

If you set all the check boxes checkboxes in the Statuses column, it will mean means the same as if none is of them are set. The same applies to the Assigned column.

Example of applying the event filter by the object ID:
Image RemovedImage Added
Image RemovedImage Added

Info
titleNote

You can also configure the filter using the SETUP_FILTER reaction in the IIDK interface (see INC_MANAGER Incident manager).

Anchor
events_archive
events_archive

...

Event archive

To go to the events event archive, click the Image Removed Image Added button on the top panel. As a result, a the list of archived events will openopens:

Image RemovedImage Added

In the events event archive mode, you can do the same actions as in the events Monitoring event monitoring mode: apply filters, use the Close and Close all buttons, generate an interim report, and select columns to be displayed display them in the table. Besides that, on the top panel, you can set the parameters for displaying the archive display:

Image RemovedImage Added

where:

  • the The period for displaying the archived events is specified by the date and time of its beginning (1) and end (2);.
  • the The Refresh button is used to update the events event list if the display period has is changed (3);.
  • item Item 6 is the number of the displayed page;.
  • item Item 7 is the total number of pages;.
  • buttons The buttons < and > are used to go to the previous/next page (5 and 8);.
  • buttons The buttons << and >> are used to go to the first/last page (4 and 9).

To return to the current events, click the Image Removed Image Added button.