Monitoring events

Use the all new Events page to monitor, investigate, and resolve events.

About event monitoring
Event monitoring provides selected application, service, and network event information, together with groups of events brought together by intelligent underlying analytics, to help you see the information you need to perform effective troubleshoot and resolution activities.
Accessing events
Monitor events by accessing the Events page.
Changing datasource, filter, and view settings
To change the events and event columns that you see in the table on the Events page, change datasource, filter, and view settings.
Displaying the event side panel
Click any event to display a side panel containing more information about that event.
Displaying event details
The Events page displays the most important columns associated with an event. Click any event to display a full set of columns for that event in the sidebar.
Working with the event timeline
Click any event to display a timeline for that event in the sidebar. The timeline includes journal entries for the event, and comments added by operators, in chronological order.
Displaying event seasonality
Events can occur within a seasonal time window. For example, an event might tend to occur on a certain day of the week or a certain time of the day. Events that tend to occur within a seasonal time window are highlighted on the Events page using a large dot in the event's Seasonal column. Click the dot to find out when the event tends to occur.
Displaying event topology
If the resource on which an event occurred can be located in the network topology system, then a large dot is presented in the event's Topology column. Click the large dot to display a topology map for this event, centered on the resource on which the event occurred.
Searching events
You can search the list of events based on data contained within the event columns. For example, type london in the search box to filter the list to display only those events where one or more the event columns contains the string "london".
Filtering events
You can filter the list of events based on severity, enrichment, and grouping.
Troubleshooting events
You can troubleshoot events by running predefined actions on an event, including administrative actions such as acknowledging an event and creating a ticket based on an event, and information retrieval actions, such as running ping or traceroute commands against the resource on which the event occurred.
Creating incidents
You can manually create Netcool Operations Insight incidents from one or more events.
Executing a runbook
A runbook is a set of predefined actions that are meant to resolve a fault condition associated with event. For example, a Memory utilization 100% event might have an associated runbook that automatically restarts the resource associated with that event. If a runbook has been set up for a specific event, then you will see a large dot in the event's Runbook column. Click the dot to open the event sidebar, from where you can launch the runbook.
Displaying an event group
Expand an event group to display the events that have been correlated together within the group.
Displaying probable cause for an event group
When you expand an event group, you will see the probable cause ratings for each event in the group. The event with the greatest probable cause rating is the most likely cause of these events.
Displaying analytics details for an event group
To understand why these events were grouped together, click the option to show group details. This option displays the underlying temporal, topological, and scope-based groups that were brought together to form this event group.
Displaying metric details for an event
This task describes how to view an event's metric information obtained by the metric anomaly detection capability.

Parent topic: Resolving events