Page History

...

You can group, filter, and sort the events. The list displays the event status, and you can handle the event from here (see Events processingEvent handling).

When you open the Incident manager window, the event monitoring opens by default, which displays only the current events that require handling. To view all events of the incident manager, go to the Archive.

...

View current events

The following information is displayed for each event by default:

1. Indicator of the presence of the camera associated with the event Image Modified.
2. #—the column displays the indicator of event locking.
   Display of locking:
   
   1. Locked remotely—.
   2. Locked locally—.
3. Event ID.
4. Handler—the name of the incident handler that handles the event.
5. Event status.
6. Object type.
7. Object ID.
8. Object name.
9. Action—description of the event.
10. Time the event occurs.
11. Priority.
12. Computer—the name of the computer from which the event is received.
13. Time (s)—the number of seconds since the event occurred.
14. Last comment—only the last comment entered while handling the event.
15. All comments—all comments entered while handling the event.
16. Additional information.

...

By default, an event is sent to the incident manager with the Waiting for handling status. Later, the event can receive the following statuses, depending on the operator's actions (see Events processingsee Event handling):

1. Acknowledged. This status is displayed if an event is currently being handled.
2. Suspended. This status is displayed if event handling was started, wasn't completed, and was suspended.
3. Taken by others/<Last name of the operator who handled the event>. This status is displayed if the event is being handled by another operator. 
4. Suspended by others. This status is displayed if event handling was started, wasn't completed, and was suspended by another operator.
5. Escalated. This status is displayed if the event is escalated to another operator.
   The following options are available:
   1. Escalated/Suspended by others—status immediately after escalation.

   2. Escalated/Taken by others—the escalated event is handled by another operator.

      Info
      title Note
      Depending on the incident manager settings, when an event is escalated, it can not cannot change its status but disappear disappears from the list for those who escalated the event.

6. Escalated/<Last name of the operator who escalated the event>. This status is displayed to for the operator to whom the event is escalated.
7. Escalated/Acknowledged. This status is displayed to for the operator to whom the event is escalated when they handle it.

Grouping

...

in the event list

If the event grouping in the event list is enabled in the settings (see see Configuring events event grouping in Incident incident manager), the events in the list are grouped by object type/object ID/event type/logic ID.

...

...

In the event archive, you can do the same actions as in the event monitoring mode: apply filters, use the Close and Close all buttons, generate an interim report, and select columns to display them in the table. Besides that, on the top panel, you can set the parameters for the archive display:

...