Default language.

Monitoring policy-based situations


The Situations page displays all policy-based situations identified from the events.

As an operator, you can use the Situations page to monitor policy-based situations. Each situation is represented as a tile in the view and can be investigated individually to perform additional actions.

Controlling the Situations page display

Use the following UI elements to change the Situations page view:

  • Time period timeperiod_field.png: Use the date and time filter to view situations for a selected period. By default, situations for the last 24 hours are displayed. You can view a similar situation group, if at least two situations of that group are created within the range of selected date and time filter.
     
  • Refresh Refresh.png: Click to refresh the page.
    By default, the Situations page is automatically refreshed after every five minutes. To change the refresh interval duration, see Configuring-general-settings-for-the-console.

  • Save Preferences save_preferences_button.png: Use this option to save the changes to the Advanced filter selections. This option is enabled only when you edit or reset the Advanced filter selections. The preferences are saved for the logged in user until a new preference is updated.

  • Search by Situation name basic_search.png: Enter a Situation name (case-sensitive) in the search box and click Search search.png.

  • Advanced filter advanced_filter.png: Use the filter to view situations based on the status, severity, priority, and type. 
    By default, only the open situations of the severities Critical, Major, Minor, Warning, and Information for the last 24 hours are displayed.

    Important

    When you click Apply filter, the selected filters remain preserved in both the list view and tile views until your session expires or you manually refresh the page.

  • Views three_views.png: Use one of the hierarchical, list, or tile views. The hierarchical and tile views are available only for All Situations. The Investigate icon_Investigate.pngbutton is available only on a tile view. On other views, you can directly open the situation link to investigate.

  • Column selector Column Selector Button.png: Use this selector to clear or select the columns to be displayed. 

  • Sort column_sorter.png: Sorting is available for the OccurredSeverityPriority, and Status columns.


To monitor situations

  1. Click Situations.
    Displays all Situations in a list view with the following details:
    • Situation name: Click to view Situation details. 
    • Date and time when the Situation occurred
    • Related events: Click to view event details in the Situation details page. 
    • Type: Icon to indicate ML-based or policy-based (requires configuration)
    • Severity: Color-coded 
    • Priority: Color-coded
    • Status: Open or closed
    • Incident ID (if available)
    • Available automations (requires configuration)
    • Actions: Available to perform on a Situation
      Situations Page.png
  2. (Optional) To choose how to view Situations, use the following information:

    Additional options to view Situations
    • Basic search: Enter a Situation name (case-sensitive) in the search box and click search.png.
    • Advanced filter to view Situations: Use the filter to view Situations based on the status, severity, priority, and type. 
      By default, open Situations of the severities Critical, Major, Minor, Warning, and Information for the last 24 hours are displayed.
    • Sort: Sorting is available for the Occurred, Severity, Priority, and Status columns.
    • Column selector: Click Column Selector Button.pngto clear the columns that you do not want to appear in the list view. Only selected columns appear on the Situations page.  
    • Refresh page: Click Refresh.png (Refresh) to refresh the page. 
  3. (Optional) To view Situations in a tile view, click Tile View Button.png(Tile View). 
    Displays all Situations in a tile view with the following details on each tile:
    • Situation name
    • Time passed since the Situation occurred, or date and time of the Situation
    • Severity: Color-coded 
    • Priority: Color-coded
    • Type: Icon to indicate whether it is an ML-based or policy-based situation
    • Total number of events in a Situation
    • Status

      Note

      Search results or filters are retained across the list view and the tile view. 


Where to go from here

Click a policy-based or ML-based situation tile to investigate the situation:

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*