Performing event operations in the TrueSight console


Event operations change the status, priority, or ownership of an event. Your user role determines the event operations that you can perform. You can also click on the respective icon on the toolbar to perform the same operation. 

Related topics

Permissions reference

Viewing-event-details-in-the-TrueSight-console

Monitoring-and-managing-events

The following table describes the basic event operations and results:

Icon

Event operation

Description

event_ack.png

Acknowledge Event

Recognizes the existence of an open event. This operation changes the event status from Open to Acknowledged.

event_assign.png

Assign To

Assigns ownership of an open, acknowledged, or assigned event to yourself or another person in the same account. This operation changes the event status from Open or Acknowledged to Assigned, and the event owner is updated with the selected user. If the event status is Assigned, only the ownership changes to the selected user.

event_close.png

Close

Ignores the event in calculating status and disables any further event operation. You can close an Open, Assigned, or Acknowledged event.

event_decline.png

Decline Ownership

Removes ownership of an event in the assigned state. This operation changes the event status to Acknowledged.

event_set_priority.png

Set Event Priority

Assigns a priority level to the event.

event_take_owner.png

Take Ownership

Assigns ownership of Open or Acknowledged event to yourself.

event_unack.PNG

Unacknowledge Event

Changes a previously Acknowledged event back to the Open state.

event_remote_actions.png

Launch Remote Actions

Displays a dialog box with a list of available remote actions. The list of remote actions change according to the selected event.

event_remote_actions_results.png

View Remote Action Results

Navigates to the Remote Action Results tab of the Event Details page.

 

event_perf_overview.png

Launch Performance Overview

Navigates to the Performance Overview tab of the Event Details page.

event_prob_cause_analysis.png

Launch Probable Cause Analysis

Navigates to the Probable Cause Analysis tab of the Event Details page.

event_details.png

View Event Details

Navigates to the Summary tab of Event Details page.

event_IM_op_console.png

Launch Infrastructure Management operator console

Launches the Infrastructure Management operator console for this event.

event_ITDA.png

Launch IT Data Analytics

Launches the Search page of the IT Data Analytics console for the events, populated with the host name and log files associated with the event, enabling you to continue investigating the root cause of the problem that may have triggered the events.

event_export.PNG

Export

Exports the event content (all slots or visible slots) to .baroc, .XML, or .csv file formats. 

event_notes.png

Add Notes

Displays the Add Notes dialog box.

cross-launch icon.png

Cross-launch URLs

Displays a dialog box with a list of available cross-launch URLs.

Cross-launch URLs enable you to access context-aware applications to troubleshoot or obtain additional information regarding an event (based on the data present in the event).

Cross-launch URLs are created by administrators (with super admin privileges). As an administrator, you can specify the conditions for displaying the URL by specifying the number of slot values that must be present in an event for the URL to be accessible. For more information, see Configuring context-aware cross-launch URLs.

As an IT operator, you can view cross-launch URLs based on the following rules:

  • Cross-launch URLs are applicable to your tenant.
  • The conditions (slots) specified for displaying the cross-launch URL are met.
  • Cross-launch URLs are not disabled.

For more information, see Accessing cross-launch URLs.

Change Table View Default icon.png

Change Table View

Displays the Select Table View dialog box.

This topic provides the following information about event operations:

To perform event operations on multiple events

Failed to execute the [excerpt-include] macro. Cause: [Error number 2 in 0: No wiki with id [confluencePage:page] could be found]. Click on this message for details.

After selecting the events, use the event action menu to perform an event operation.

To customize the number of multiple events to perform event operations, see Customizing-the-display-of-the-event-list-in-the-TrueSight-console.

Tip

 Enable the check box for events when you are using a mobile device to access the TrueSight console. See Customizing-the-display-of-the-event-list-in-the-TrueSight-console.

Note

Although all the event operations that are available to your user role are available when you select two or more events in the event list, an operation is performed only on the selected events whose status makes the operation valid. If the operation is not valid for some selected events, a warning box reports the internal IDs of those events and the reason that the operation is not valid. Click OK to execute the event operation on the applicable events, if any.

To acknowledge an event

  1. From the event list, select one or more open events. 
  2. From the event action menu, select Acknowledge Event or from the event toolbar, click event_ack.png.
  3. If a confirmation window appears, optionally enter any notes for the event and click OK.
    The events_Ack.PNG icon appears in the event status column to indicate that you have acknowledged the event.

To take ownership of an event

  1. From the event list, select one or more open or acknowledged events. 
  2. From the event action menu, select Take Ownership or from the event toolbar, click event_take_owner.png.
  3. If a confirmation window appears, optionally enter any notes for the event and click OK.
    The events_Assigned.PNG icon appears in the event status column to indicate that you have taken ownership of the event.

To decline ownership of an event

  1. From the event list, select one or more events that you own. 
  2. From the event action menu, select Decline Ownership or from the event toolbar, click event_decline.png.
    You can decline an event only if you are the owner of that event.
  3. If a confirmation window appears, optionally enter any notes for the event and click OK.
    The events_Ack.PNG icon appears in the event status column to indicate that you have acknowledged the event.

To close an event

  1. From the event list, select one or more open, assigned, or acknowledged events. 
  2. From the event action menu, select Close Event or from the event toolbar, click event_close.png.
  3. If a confirmation window appears, optionally enter any notes for the event and click OK.
    The events_Closed.PNG icon appears in the event status column to indicate that you have closed the event.

Notes

  • You cannot close an abnormality event.
  • When you close an alarm event, it can take up to 2 minutes for the status to change.
  • Closing App Visibility events and Synthetic Monitor events in this view does not close the events in App Visibility.

    • To close a Synthetic Health event, see Analyzing synthetic health details.

    • App Visibility events, and Synthetic Monitor SLA events are closed automatically when they are no longer relevant.

To assign an event

  1. From the event list, select one or more events. 
  2. From the event action menu, select Assign Event or from the event toolbar, click event_assign.png.
  3. Select a user to assign the event or events to, optionally enter any notes for the event and click OK.
    The events_Assigned.PNG icon appears in the event status column to indicate that you have assigned the event.

To set the priority of an event

  1. From the event list, select one or more open, assigned, or acknowledged events. 
  2. From the event action menu, select Set Event Priority or from the event toolbar, click event_set_priority.png.
  3. Select the priority to assign to the event or events, optionally enter any notes for the event and click OK.
    The priority icon and text is updated to reflect the newly-assigned priority.

To unacknowledge an event

  1. From the event list, select one or more acknowledged events. 
  2. From the event action menu, select Unacknowledge Event or from the event toolbar, click event_unack.PNG.
  3. If a confirmation window appears, optionally enter any notes for the event and click OK.
    The events_Open.PNG icon appears in the event status column to indicate that the event is in the open state.

To launch a remote action on an event

  1. From the Events page, select one or multiple events.
  2. From the event action menu, select Launch Remote Actions or from the event toolbar, click event_remote_actions.png.
    The Launch Remote Actions option is also available from the Event Details page.
  3. In the Remote Actions window, select a remote action, and click Launch.
  4. In the Execute Action dialog box, enter the appropriate values required to run the selected remote action, and select Execute.

To view the remote action results

  1. In the Events page, the events_RemoteAction.PNG icon indicates that the event contains a remote action result.
    Click the icon or from the event action menu, select View Remote Action Results or from the event toolbar, click event_remote_actions_results.png.

  2. The Remote Action Result tab of the Event Details page displays the results, including the errors, if any.
    The following codes indicate the remote action result:

    Zero

    Success

    Non-zero

    Failure

    -1

    In progress

  3. From the Remote Actions action menu, you can export the results to .BAROC, .CSV, or .XML formats.

To launch the performance overview

  1. From the Events page, select a event.
  2. From the event action menu, select Launch Performance Overview or from the event toolbar, click event_perf_overview.png.
  3. The Performance Overview tab of the Event Details page displays a historical graph of the monitored object for which the event occurred.

To launch the probable cause analysis

  1. From the Events page, select a event.
  2. From the event action menu, select Launch Probable Cause Analysis or from the event toolbar, click event_prob_cause_analysis.png.
  3. The Probable Cause Analysis tab of the Event Details page displays the relevant events based on probable cause analysis of the data.

To view the event details

  1. From the Events page, select a event.
  2. From the event action menu, select View Event Details or from the event toolbar, click event_details.png.
  3. The Summary tab of the Event Details page displays key information about the event, such as status, severity, priority, date and time of occurrence, object class, object name, host, owner, message, and detailed message. Alarms and abnormalities are also displayed in the Summary tab. 

To launch the Infrastructure Management operator console

  1. From the Events page, select one or multiple events.
  2. From the event action menu, select Launch Infrastructure Management operator console or from the event toolbar, click event_IM_op_console.png.
  3. The Infrastructure Management operator console displays the relevant details for the selected events.

To launch the IT Data Analytics console

  1. From the Events page, select one or multiple events.
  2. From the event action menu, select Launch IT Data Analytics or from the event toolbar, click event_ITDA.png.
  3. The IT Data Analytics console displays the relevant details for the selected events.

To export data for an event

  1. From the event list, select one or more events. 
  2. From the event action menu, select Export or from the event toolbar, click event_export.PNG.
  3. In the Export window, select the format and content and click Export. 
  4. The event content is exported for all slots or visible slots to .baroc, .XML, or .csv file formats. 

To add notes for an event

  1. From the event list, select one or more events. 
  2. From the event action menu, select Add Notes or from the event toolbar, click event_notes.png.
  3. Enter any notes for the event and click OK.

To access cross-launch URLs

  1. From the event list, select an event.
  2. Proceed in one of the following ways:
    1. From the event action menu, select Cross-launch URLs.
    2. From the event toolbar, click cross-launch icon.png.
  3. In the Cross-Launch URLs window, select a cross-launch URL name and click Launch.
    The cross-launch URL opens in a new tab.

To change the table view for an event

  1. From the event list, select one or more events. 
  2. From the event toolbar, click Change Table View Default icon.png.
  3. In the Select Table View window, select an appropriate table view and click OK. 
    When you change the table view, the table view icon changes to event_change_table_view.png.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*