Alert Summary Widget
The Alert Summary widget provides summary of alerts by severity or resource, aggregated by number of alerts or occurrences. Perform the steps below to configure settings for the Alert Summary widget.
Data
The Data tab enables you to select the resources for which you want to view the alert summary.
Perform the following steps to set the widget settings for Data tab.
- For datasource and resource type settings, please refer to section Select Widget
Resources in section Create. Important:
Resource Type, Object, allows you to search on object description, device display name, and plugin.ObjectName. You must enter a string in double-quotes. Search can also be performed on a word. You may enter one or more strings/words in Resource Type > Object.
Example# 1
If you enter "IP of device" echo CPU196640, these are 3 key terms to search on. All objects containing IP of device, echo, and CPU196640 will be available to choose from.
IP of device is in double-quotes as the search is on all words with space in between. A string can have one or more spaces in it.
Example# 2
If you enter IP of device echo CPU196640, these are 5 key terms to search on. All objects containing IP, of, device, echo, and CPU196640 will be available to choose from.
Example# 3
If you enter CPU, all objects containing CPU will be available to choose from. It can return objects such as CPU196640, CPU196632, etc. - Alert Summary visualization does not support Result limit.
- Click Run to generate an Alert Summary report based on the configuration.Note: Run button is only available when one or more fields are changed in the Data tab.
Example
Analyze
The Analyze tab enables you to define settings for the data you retrieve and to use data analysis features.
Perform the following steps to set the widget settings for Analyze tab.
- Under AGGREGATION, select one of the following options.Important: From Charts tab, if Summary visualization is chosen, only aggregation by Severity is supported. You will notice that Severity option will be chosen by default and you will not be allowed to change the aggregation. Aggregations by Device, Device Group, and Object Group are not supported.
From Charts tab, if Treemap visualization is chosen, aggregations Device, Device Group, and Object Group are supported. It does not support aggregation by Severity.- Device - to display alerts for specific devices.
- Device Group - to display alerts at the device group/device type level.
- Object Group - to display alerts for specific object groups.
- Severity - to display alerts by severity.
- Under DISPLAY AS, select one of the following options:
- Occurrences - to dis play the number of occurrences of alerts.
- Distinct - to display the number of distinct alerts.
- Under Time, by default, timespan / time zone selected is All Time New_York. Click
the button to change the timespan / timezone. Select one of the following options:
- Past n hours, days, weeks, months, quarter, year - to display data from n hours, days, weeks, months, quarter, or year ago until now.
- Today - to display data from 12:00am today until now.
- Yesterday - to display data from 12:00am yesterday until 12:00am today.
- Last week, month, quarter, year - to display data from 12:00am on the first day of the last completed week, month, quarter, or year to 11:59pm on the last day of the last completed week, month, quarter, or year.
- This week, month, quarter, year - to display data from 12:00am on the first day of the week, month, quarter, or year until now.
- Customize the time span with From and To date / time.
- Click Select button to choose the modified timespan / time zone.
Filter
The Filter tab enables you to apply filters to display the results.
Perform the following steps to set the widget settings for Filter tab.
- Click the Attribute drop-down and select one of the following options. Perform the
actions for the item you select.
- Alert ID - to filter results by the alert ID.
- Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
- In the Value field, specify an alert ID.
- Alert Status - to filter results by the alert status.
- Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
- Click the Value drop-down and select one of the following options:
- Open - to apply the filter to open alerts.
- Closed - to apply the filter to closed alerts.
- Both - to apply the filter to both open and closed alerts.
- Alert Type - to filter results by the alert type.
- Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
- Click the Value drop-down and select one of the following options:
- Traps - to apply the filter to traps.
- Alerts - to apply the filter to alerts.
- Flow - to apply the filter to flow.
- Assignee User - to filter results by the user the alert is assigned to.
- Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
- Click the Value drop-down and select either a user or Unassigned.
- Device Name - to filter results by the device name.
- Click the Operator drop-down and select Contains to display results that contain the value you specify. Select Doesn't contain to display results that do not contain the value you specify.
- In the Value field, enter complete or part of the device name.
- Message - to filter results by the alert message.
- Click the Operator drop-down and select Contains to display results that contain the value you specify. Select Doesn't contain to display results that do not contain the value you specify.
- In the Value field, enter complete or part of an alert message.
- Policy ID - to filter results by policy ID that triggered the alert.
- Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
- In the Value field, specify a policy ID.
- Policy Name - to filter results by policy name that triggered the alert.
- Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
- In the Value field, specify a policy name.
- Severity - to filter results by the alert severity level.
- Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
- Click the Value drop-down and select an alert severity level (Emergency, Alert, Critical, Error, Warning, Notice, Info, Debug).
- Show Ignored - to filter results by whether alerts have or haven't been ignored.
- Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
- Click the Value drop-down and select one of the following options:
- Yes - If you selected Equals, this displays ignored alerts. If you selected Not equals, this omits ignored alerts.
- No - If you selected Equals, this omits ignored alerts. If you selected Not equals, this displays ignored alerts.
- Threshold ID - to filter results by the ID of the threshold that triggered the alert.
- Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
- In the Value field, specify a threshold ID.
- Threshold Name - to filter results by the threshold name.
- Click the Operator drop-down and select Equals to display results that match the value you specify. Select Not equals to display results that do not match the value you specify.
- In the Value field, enter complete or part of the threshold name.
- Alert ID - to filter results by the alert ID.
- Click Add to add the new filter. The filters you add appear under the Add/Remove buttons.
- To remove any filter(s) from the list, select the check box for filter(s) you would like to remove and click Remove.
Linking
The Linking tab enables you to select a data element and link it to a related report or report template. Perform the following steps to add, delete, and edit links.
Perform the following steps to set the widget settings for Linking tab.
- Include report links allows report consumers to click on a data element such as, device name, and link it to the related report. Enable to include the report link that you configure. If you want to prevent the report link from being included, disable it. Continue with the steps below to configure the report link.
- By default, Report Link 1 is enabled.Note: If you wish to exclude the report link, disable Report Link 1.
- The Clicking on drop-down has only one possible data item - Value. When report linking is enabled, clicking on this data item will link to the report or report template that you specify below.
- Click the Links to report drop-down and select one or more reports or report templates to display when you click on the data item that you specified in the previous step.
- To remove the report link, click .
- If the report link has been deleted, you may click to add.
Charts
The Charts tab enables you to define how you want to display the report data.
Visualizations
The charts provide 4 visualizations.
Summary
The Summary visualization displays the total number of alerts for the specified resource. Perform the following steps to set the widget settings for the Summary visualization.
- Select the Summary visualization by clicking .
- SUMMARY TITLE
- Enable Show title to enter the title name in the text field provided and display it in report. Else, disable it.
- Enable Show subtitle to enter the sub-title name in the text field provided and display
it in the report. Else, disable it.Note: Subtitle in the report only shows the resources that the user has permissions to view.
- SUMMARY VISUALIZATIONS
- Select the Include time span check box to display the time span at the top of the visualization.
- Select the Breakout by severity check box to display the total number of alerts for each severity level in addition to the total number of all alerts.
- Select Don't show severities with zero occurrences check box to hide the severities that have zero occurrences.
- Click to chain to
Alert Details, Alert Summary, or Logs.
Example: Chain Alert Summary to Alert Details
Select severities Critical and Error in Alert Summary. You will see the chained Alert Summary > Alert Details show all instances of severities Critical and Error in the report.
Pie
The Pie visualization displays the data as a pie graph. Perform the following steps to set the widget settings for the Pie visualization.
- Select the Pie visualization by clicking .
- PIE CHART TITLE
- Enable Show title to enter the title name in the text field provided and display it in report. Else, disable it.
- Enable Show subtitle to enter the sub-title name in the text field provided and display it in the report. Else, disable it.
- PIE VISUALIZATIONSImportant: In the Pie visualizations below, aggregation selected from Analyze tab is Device.
- It provides 3 different visualizations.
- Donut
- Pie
- Nightingale
- Donut
- Select Don't show severities with zero occurrences check box to hide the severities that have zero occurrences. This field is only available when Analyze tab > AGGREGATION has the Severity option selected.
- Under Radius, extend the bar to the right to increase the radius or shorten the bar to decrease the radius.
- Enable Show labels to display labels for the device name, object name, indicator name, and percentage of the pie graph. Else, disable it.
- Enable Show tooltip to display tooltips when you hover over sections of the pie graph or
over labels (if labels are used). Select the check box for each of the following options that you
would like to apply to the tooltips:
- Severity - to display severity levels.
- Occurrences - to display the number of occurrences of alerts.
- Distinct - to display the number of distinct alerts. If you do not want to display the tooltips, disable Show tooltip.
- Enable Enable "Others" to add a slice called Others that rolls up values below the percentage value entered in field Percentage.
- It provides 3 different visualizations.
- LEGEND
- Enable Enable legend to display a legend for the graph. Else, disable it.
- Select one of the following options:
- Standard - to display legend in the standard format.
- Click the Position drop-down to specify where you would like the legend to appear in relation to the graph. The position is set to Bottom by default. Other options include Top, Left, and Right.
- Table - to display the legend in table format. Select the check box for each of the
following options that you would like to apply to the tooltips.
- Name - to display the device name.
- Occurrences - to display the number of occurrences of alerts.
- Distinct - to display the number of distinct alerts.
- Percent - to display the percentage of the pie graph for the section.
- Standard - to display legend in the standard format.
Bar Chart
The Bar Chart visualization displays a graph of qualitative independent variables. Perform the following steps to set the widget settings for the Bar Chart visualization.
- Select the Bar Chart visualization by clicking .
- BAR CHART TITLE
- Enable Show title to enter the title name in the text field provided and display it in report. Else, disable it.
- Enable Show subtitle to enter the sub-title name in the text field provided and display it in the report. Else, disable it.
- BAR VISUALIZATIONSImportant: In the Bar visualizations below, aggregation selected is Severity.
- It provides 2 different visualizations.
- Horizontal - to display horizontal bars.
- Vertical - to display vertical bars.
- Horizontal - to display horizontal bars.
- Select Don't show severities with zero occurrences check box to hide the severities that have zero occurrences. This field is only available when Analyze tab > AGGREGATION has the Severity option selected.
- Under Spacing, extend the bar to the right to increase the amount of space between bars or shorten the bar to decrease the amount of space.
- Enable Show tooltip to display tooltips when you hover over sections of the pie graph or
over labels (if labels are used). Select the check box for each of the following options that you
would like to apply to the tooltips:
- Severity - to display severity levels.
- Occurrences - to display the number of occurrences of alerts.
- Distinct - to display the number of distinct alerts.
-
If you do not want to display the tooltips, disable Show tooltip.
- It provides 2 different visualizations.
- LEGEND
- Enable Enable legend to display a legend for the graph. Else, disable it.
- Select one of the following options:
- Standard - to display legend in the standard format.
- Click the Position drop-down to specify where you would like the legend to appear in relation to the graph. The position is set to Bottom by default. Other options include Top, Left, and Right.
- Table - to display the legend in table format. Select the check box for each of the
following options that you would like to apply to the tooltips:
- Name - to display the device name.
- Occurrences - to display the number of occurrences of alerts.
- Distinct - to display the number of distinct alerts.
- Standard - to display legend in the standard format.
Treemap
The Treemap visualization displays data in a hierarchical format to enable you to drill down a single level depending on the resources you select. Perform the following steps to set the widget settings for the Treemap visualization.
- Select the Treemap visualization by clicking .
- TREEMAP TITLE
- Enable Show title to enter the title name in the text field provided and display it in report. Else, disable it.
- Enable Show subtitle to enter the sub-title name in the text field provided and display it in the report. Else, disable it.
- TREEMAP VISUALIZATIONS
- Enable Show tooltip to display tooltips when you hover over sections of the pie graph or
over labels (if labels are used). Select the check box for each of the following options that you
would like to apply to the tooltips:
- Severity - to display severity levels.
- Distinct alerts - to display the number of distinct alerts.
- Total occurrences - to display the total number of occurrences of alerts. If you do not want to display the tooltips, disable Show tooltip.
- Enable Show tooltip to display tooltips when you hover over sections of the pie graph or
over labels (if labels are used). Select the check box for each of the following options that you
would like to apply to the tooltips:
- LEGEND
- Enable Enable legend to display a legend for the graph. Else, disable it.
Example: Severity Details
Severity 'Emergency' - click in 'emergency' box in the screenshot aboveSeverity 'Warning' - click in 'warning' box in the screenshot above
Note: Repeat the same for all severities. In this example, the number of alerts are 0 for severities Alert and Info. Due to this, there is no visualization available for these scenarios.