Viewing or adding notes to an event
If you want to provide more information about an event, select Monitoring > Events to add notes to the event.
The following information is displayed in the notes table on the Logs & Notes tab on the Event Details page:
- Notes added to the event.
- Details of any operations executed on the event.
To view the source of an event update, refer to Source in the notes table. An event update can have the following sources:- Modify Event API - Event is updated by using APIs
- Policy name - Event is updated by using event policies
- Name of the user who manually updates the event
- Event policy executed on the event.
The system lists logs for different configurations of the same or different policy types. These logs offer more flexibility to troubleshoot and understand the execution of configurations in each policy phase.
For example, a policy has the following configurations:
In this scenario, unique log records are listed for each configuration in the basic, advanced enrichment policy, and notification policy as shown in the following image:
The configuration number in the logs is the sequence number of different configurations in the event policy.
In the preceding view, hover on entries in the Date column to view the event policy execution time in seconds and milliseconds. Use the detailed timestamp to differentiate the execution order of policies applied to events when they arrive in quick succession. - Details of notifications.
- Details of alarm actions.
Details of event closure.
Scenario
Sarah is an administrator at Apex Global. Her organization conducts a regular system cleanup activity that deletes unused entities from the system. However, Sarah soon realizes that by deleting the entities, she is not notified of event closures. She now wants to view notes to understand the reason for event closures, including those events closed by the entity deletion process.
After you disable a monitoring policy or delete a PATROL Agent, the alarm event is closed and the reason is displayed in the notes table.
For more information, see the following topics:
Related topics
To add notes from the Events page
- Click the action menu for the event and select Add Notes.
You can also select multiple events from the Events page and add a common note. - Enter the note and click OK.
The
icon in the Message column of the event indicates that the event has a note. Click the icon to go to the Logs & Notes tab in the Event Details page.
To add notes from the Event Details page
- Click the Logs & Notes tab.
You can view the associated notes, if any. - To add a new note, enter the note in the box above the Add Note button and click Add Note.