Alert Details Widget

The Data tab enables you to select resources for which you want to view the alert details.

Perform the following steps to set the widget settings for Data tab.

1. For datasource and resource type settings, please refer to section Select Widget Resources in section Create.
   Important:
   Resource Type, Object, allows you to search on object description, device display name, and plugin.ObjectName. You must enter a string in double-quotes. Search can also be performed on a word. You may enter one or more strings/words in Resource Type > Object.
   
   

   Example# 1
   If you enter "IP of device" echo CPU196640, these are 3 key terms to search on. All objects containing IP of device, echo, and CPU196640 will be available to choose from.
   IP of device is in double-quotes as the search is on all words with space in between. A string can have one or more spaces in it.

   
   

   Example# 2
   If you enter IP of device echo CPU196640, these are 5 key terms to search on. All objects containing IP, of, device, echo, and CPU196640 will be available to choose from.

   
   

   Example# 3
   If you enter CPU, all objects containing CPU will be available to choose from. It can return objects such as CPU196640, CPU196632, etc.

2. In the Result limit field, enter the number of results to display.
   Important: Result limit must be between 1 to 10,000. Limits greater than 200 can impact performance.
3. Click Run to generate an Alert Details report based on the configuration.
   Note: Run button is only available when one or more fields are changed in the Data tab.
   
   

   Example

   

The Analyze tab enables you to define settings for the data you retrieve and to use data analysis features.

Perform the following steps to set the widget settings for Analyze tab.

1. Under AGGREGATION, select one of the following options:
   1. None - to not apply aggregation.
   2. Device - to apply aggregation at the device level.
   3. Device Group - to apply aggregation at the device group level.
   4. Object Group - to apply aggregation at the object group level.
2. By default, timespan / time zone selected is All Time New_York. Click the button to change the timespan / timezone. Select one of the following options:
   1. Past n hours, days, weeks, months, quarter, year - to display data from <n> hours, days, weeks, months, quarter, or year ago until now.
   2. Today - to display data from 12:00am today until now.
   3. Yesterday - to display data from 12:00am yesterday until 12:00am today.
   4. Last week, month, quarter, year - to display data from 12:00am on the first day of the last completed week, month, quarter, or year to 11:59pm on the last day of the last completed week, month, quarter, or year.
   5. This week, month, quarter, year - to display data from 12:00am on the first day of the week, month, quarter, or year until now.
   6. Customize the time span with From and To date / time.
   7. Click Select button to choose the modified timespan / time zone.

The Filter tab enables you to apply filters to display the results.

Perform the following steps to set the widget settings for Filter tab.

1. Click the Attribute drop-down and select one of the following options.
   • Alert ID - to filter results by the alert ID.
     1. Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
     2. In the Value field, specify an alert ID.
   • Alert Status - to filter results by the alert status.
     1. Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
     2. Click the Value drop-down and select one of the following options:
        • Open - to apply the filter to open alerts.
        • Closed - to apply the filter to closed alerts.
        • Both - to apply the filter to both open and closed alerts.
   • Alert Type - to filter results by the alert type.
     1. Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
     2. Click the Value drop-down and select one of the following options:
        • Traps - to apply the filter to traps.
        • Alerts - to apply the filter to alerts.
        • Flow - to apply the filter to flow.
   • Assignee User - to filter results by the user the alert is assigned to.
     1. Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
     2. Click the Value drop-down and select either a user or Unassigned.
   • Device Name - to filter results by the device name.
     1. Click the Operator drop-down and select Contains to display results that contain the value you specify. Select Doesn't contain to display results that do not contain the value you specify.
     2. In the Value field, enter complete or part of the device name.
   • Message - to filter results by the alert message.
     1. Click the Operator drop-down and select Contains to display results that contain the value you specify. Select Doesn't contain to display results that do not contain the value you specify.
     2. In the Value field, enter complete or part of an alert message.
   • Policy ID - to filter results by policy ID that triggered the alert.
     1. Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
     2. In the Value field, specify a policy ID.
   • Policy Name - to filter results by policy name that triggered the alert.
     1. Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
     2. In the Value field, specify a policy name.
   • Severity - to filter results by the alert severity level.
     1. Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
     2. Click the Value drop-down and select an alert severity level (Emergency, Alert, Critical, Error, Warning, Notice, Info, Debug).
   • Show Ignored - to filter results by whether alerts have or haven't been ignored.
     1. Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
     2. Click the Value drop-down and select one of the following options:
        • Yes - If you selected Equals, this displays ignored alerts. If you selected Not equals, this omits ignored alerts.
        • No - If you selected Equals, this omits ignored alerts. If you selected Not equals, this displays ignored alerts.
   • Threshold ID - to filter results by the ID of the threshold that triggered the alert.
     1. Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
     2. In the Value field, specify a threshold ID.
   • Threshold Name - to filter results by the threshold name.
     1. Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
     2. In the Value field, enter complete or part of the threshold name.
2. Click Add to add the new filter. The filters you add appear under the Add/Remove buttons.
3. To remove any filter(s) from the list, select the check box for filter(s) you would like to remove and click Remove.

The Linking tab enables you to select a data element and link it to a related report or report template. Perform the following steps to add, delete, and edit links.

Perform the following steps to set the widget settings for Linking tab.

1. Include report links allows report consumers to click on a data element such as, device name, and link it to the related report. Enable to include the report link that you configure. If you want to prevent the report link from being included, disable it. Continue with the steps below to configure report link(s).
2. By default, Report Link <#> is enabled.
   Note: If you wish to exclude the report link, disable Report Link <#>.
3. Use the Clicking on drop-down to select a data item that you want to link with the report or report template. When you select a data item for a report link, that data item is no longer listed as an option for other report links as it has already been used. You can apply multiple reports/report templates to the selected data item. For example,
   • Device ID - the device ID.
   • Device Name - the device name.
   • Object ID - the object ID.
   • Object Name - the object name.
   • Object Group ID - the object group ID.
   • Object Group Name - the object group name.
   • Device Group ID - the device group ID.
   • Device Group Name - the device group name.
   • Device Description - the device description.
   • IP Address - the IP address of the device that the alert applies to.
4. Click the Links to report drop-down and select one or more reports or report templates to display when you click on the data item that you specified in the previous step.
5. To remove the report link, click .
6. To create additional report link(s), click .

The Charts tab enables you to define how you want to display the report data.