View Log Alerts
Last updated on:
The list of alerts triggered can be viewed under the Alerts tab. You can view the timestamp of the alert, the alert message, the profile, and the device which triggered it.
Filtering Alerts
The filter alerts option allows you to select the required type of alerts to be displayed. This helps filter and monitor alerts related to a particular category.
To filter alerts, follow the steps given below.
- Click on the
Filter icon in the Active Alerts page. - Two sets of fields are available, with Alert Parameters related only to the Alert module and Alert Criteria-Based Fields including all other fields.
- Within the Alert Parameters and Alert Criteria-Based Fields, select the checkboxes for the fields you wish to display.
The alerts that satisfy the filter condition will be displayed on the Active Alerts page. You can remove the filter conditions by clicking on Clear Filter in the top right corner.
Export Alert Information
The Export As option allows you to export your alerts as a report in a pdf or csv format. These reports are beneficial for compliance audits. To export alerts, follow the steps given below:
- Open the Alerts tab and click on the Export As button on the top right corner.
- Select the required format of the file.
- Click on the
icon next to the Export As button. - In the drop down list, hover over the required file and click Download.
- The report file will be downloaded to your download location.
Information on the alert
Hovering over the message column of the alert displays the entire message of the alert.
Alert Format Message
Clicking on an alert opens a pop-up window that shows the Alert Format Message. Details such as Event ID, Device Type and more can be obtained by clicking on More Details.
Add / Remove Columns
Columns can be added or removed by clicking on the Add/Remove Columns option in the top right corner of the Active Alerts window. You can choose and rearrange the columns as required. A minimum of 3 and maximum of 10 columns can be selected.
Alert filters
You can filter alerts according to all available fields.
Click Save as View to create a new filter view for alerts.
You can now view the saved alerts.
Threshold alerts
For Threshold-based alerts, you can now view each instance by clicking on the alert.
- Clicking on the threshold number displays a pop-up with more details.
- Clicking details opens up a pop-up that shows alert details of each specific alert.
- Event logs that match the threshold alert but exceed the search retention days can be reloaded. Make use of the Reindex option to reload archived event logs.