Incidents Page

The Incidents A collection of one or more related triggers. Relationships that cause triggers to be combined into incidents include application, location, operating system, or a trigger by itself. page lists occurrences in your network that have met criteria justifying further investigation (incidents). Click in an incident's row to show its details in a preview pane, or click the link in the incident's Description field to view those same details on the incident details page. The incident details include the incident's primary indicator and any correlated indicators, as well as analysis resulting from the runbook An automated workflow that executes a series of steps or tasks in response to a triggered event, such as the detection of anomalous behavior generating an incident, a lifecycle event, or a manually executed runbook. associated with the incident type. You can display the Incidents page by clicking an element in the Impact Uniform Resource Locator. The address used to access resources on the internet, such as webhook endpoints or API endpoints for runbook automation. Dashboard. Alternatively:

Navigate to the Incidents page:

1. Click the Launchpad button ⁝⁝⁝.
2. Click AI Ops > Analytics & Incidents.

You can filter the incident list coarsely by Ongoing incidents only (this is the default behavior), by Status The current state of an incident or runbook, indicating its progress through investigation and resolution workflows., by Priority A classification that indicates the importance or urgency of an incident, used to prioritize investigation and remediation efforts., and by name (partial or full) and time. The Filters pane at the left enables you to search for incidents based on narrowly specified criteria.

This information is shown for each incident:

• Priority

• Status: You can change the status by choosing Change State from the ... menu at the right end of the row.

• Description: Click this link to show the incident details on a dedicated page.

• Detected On

• Started

• Duration

• Impacted Users

• Impacted Locations An entity type representing physical or logical locations in the customer environment where entities are deployed and monitored.

• Impacted Applications An entity type representing software applications deployed in the customer environment that are monitored for performance and anomalies.

• Runbook Status indicator

• ... menu: Open Incident, Open Incident In New Tab, Change State