The Incidents dashlet is the entry point for managing and querying incident information across all System Profiles.
By default, the dashlet filter is configured to show new and unconfirmed incidents of the last 3 days. Notification based on incident rules provides more flexibility than notification based on thresholds, because incident rules can define complex conditions, so they provide the capability to generate notifications only if two or more measure values exceed their thresholds simultaneously.
Incident notifications are useful starting points for performance analysis. See Incidents and Alerting for more information about incidents.
As the following figure shows, the Incidents dashlet lists each incident rule that was violated.
To display details in a popup window, double-click the incident or right-click it and select Details from the context menu.
Incident state and incident rule state
The icon to the left of an incident or incident rule (1) denotes the incident's severity.
If an incident rule was violated multiple times, all incidents that have a state of new and a severity of warning or severe are listed individually below the incident rule. The incident count is appended in parentheses to the incident rule name.
Incidents with a state of new are listed in boldface. The total of all new incidents is appended to the System Profile name (2).
The History column (3) shows a heat field that charts the occurrences of an incident in the configured time frame. Hold the mouse pointer over a bar to display details in a popup window.
To copy an active incident into a new Incidents dashlet, right-click the incident and select Drill Down > Incidents.
To chart an active incident in a Charts dashlet, double-click the incident to open the Details popup window, and click Show Measures in Chart.
These columns are displayed by default:
- Name: The names of the System Profiles, incident rules, and incidents,
- History: The heat field representation of incidents in the specified timeframe.
- Start Time: The date and time the incident began.
- Duration: The duration of the incident.
- End Time: The date and time the incident ended.
- Source: The incident source (<Agent>@<Host>).
- Confirmed By: The user that confirmed the incident.
The following columns are hidden by default.
- Confirmation Message: The confirmation message entered by the user that confirmed the incident.
- Sensitivity: The configured sensitivity setting of the incident rule.
- Conditions: The conditions that trigger the incident rule.
- Thresholds: The measure threshold settings of the incident rule.
- Actions: The actions triggered by the incident rule upon violation.
To hide or display columns:
- Right-click the dashlet and select Dashlet Properties from the context menu.
- In the Dashlet Properties dialog box, select the Columns tab.
- Clear or select the Visible check boxes for the columns, as needed.
Depending on the selected table entry, the context menu provides the following functions.
- Details: Opens the Details window with information about the selected table entry.
- Create Downtime: Schedule downtime to suppress incident reporting for planned downtimes like system backups or database mirroring. See Incident Downtimes for more information.
- Create Incident Rule: Configure a new incident rule for the selected System Profile. See Incidents and Alerting for more information.
- Confirm All Incidents: Set all incidents associated with the selected System Profile or incident rule to the confirmed state.
- Set All Incidents In Progress: Set all incidents associated with the selected System Profile or incident rule to the in progress state.
- Delete All Incidents in Timeframe: Delete all incidents associated with the selected System Profile or incident rule.
- Create Custom Incident: Create an incident manually, for example for logging purposes.
- Show Measures in Chart: Open a Chart dashlet to chart the measures configured for the incident rule in the incident's timeframe.
- Confirm Incident: Set the selected incident to the state confirmed. You can select multiple incidents to use this command.
- Set Incident in Progress: Set the selected incidents to the state in progress. You can select multiple incidents to use this command.
- Delete: Delete the selected item.
- Edit Incident Rule: Alter the properties of the incident rule. An altered incident rule takes effect only after confirmation of the incidents of this incident rule.
- Disable/Enable Incident Rule: Disable an active incident rule, or enable a disabled incident rule. A disabled incident rule remains in the incidents table but is dimmed.
- Edit Incident: Alter the message, severity, and duration of the selected incident. This command is available only for active incidents.
- Drill Down: Copy an active incident to a new Incidents dashlet.
- Export Incident Session: Export the session for the timeframe when an incident occurred. See Usage of Sessions for more information. To get a significant session that contains only PurePaths that are directly related to the incident, drill down to the PurePaths before you export the session.
- Structure Mode: Change the grouping of the incidents. See below for details.
The Structure Mode command displays a cascading menu that provides the following options for organizing the Incidents table:
- Group by System Profile/Incident Rule
- Group by Severity
- Group by Start Time
- Group by State
- Group by Progress