Adding Events to an Incident

To perform this function you must have user permissions to Modify Incident(s) and Add to existing Incident(s).

To add events to an incident:

  1. In a Real Time Event Table or a Snapshot, select an event or a group of events and right-click. Click Add To Incident.

  2. In the Add Events To Incident dialog box, click Browse to list the available incidents.

image\ebx_1764444420.gif

  1. Select Incident window will display. Click Search to view a list of incidents. List of incidents of selected criteria will display.

NOTE: You can define your criteria to better search for a particular incident or incidents in Select Incident window.

image\ebx_-354361395.gif

  1. Highlight an incident and click Add.

  2. Click OK. The event or events selected are added to the incident in the Incidents Navigator.

NOTE: If events are not initially displayed in a newly created Incident, it is most likely due to a lag in the time between display in the Real Time Events window and insertion into the database. If this occurs, it may take a few minutes for the original events to finally be inserted into the database and display in the incident.