Use the Event Browser

Reopen: Sets the lifecycle status for the selected events to Open. The events can now be assigned to users for investigation and resolution.

Work On: Sets the lifecycle status for the selected events to In Progress, indicating that the underlying problems of the events are under investigation.

Resolve: Sets the lifecycle status for the selected events to Resolved.

Close: Sets the lifecycle status for the selected events to Closed.

Assign To: Opens the Event Assignment dialog box, enabling you to assign the selected events to a specific user or user group.

Relate Events: Opens the Relate Events dialog box, enabling you to manually relate the selected events by assigning one event as a cause event. All other events become symptom events.

Manually related events can also be used as the basis for automatically generating a correlation rule. For details, see Relating Events Manually and Creating Correlation Rules from Manually-Related Events.

Show Events Assigned to Me: Displays all events assigned to the current user in the Event Browser. Any applied filters and views are deactivated. Repeated selection toggles between displaying the events assigned to the current user and displaying the events filtered by the last selected filter and view.

When Show Events Assigned to Me is selected, a confirmation of the selected mode is displayed in the information bar.

Browser Options: Opens the Browser Options dialog box for the current Event Browser tab. You can modify and set display options (for example, to hide or display columns, or change the order in which the data appears, play sound on receipt of an event). For more information, see Configure the Event Browser.

Export Event List: Opens the Export Event List dialog box for the current Event Browser where you can specify which event attributes you want to export to the external file.

Show/Hide Event Details Pane: Toggles between the Event browser view with and without the Event details pane. You can also open the event details for an event in a pop-up window by using the Show > Event Details context menu item or double-click the event.

Refresh: Synchronizes the event data displayed in the user interface with the latest information available in the database on the server and forces a complete refresh.

Show/Hide Closed Events: Displays the Closed Events Browser Configuration dialog box used to specify the time period for the closed events to be displayed in the Closed Events Browser. Click OK and the Closed Events Browser displays the closed events of the selected CI over a specified time period.

If you want active events to be displayed along with closed events, apply filtering according to the time when the event was received, and then select the Include active events check box.

Click the Hide Closed Events button to return to the Event Browser.

When Show Closed Events is selected, a notification is displayed in the information bar, indicating the type of displayed events, the time period that is used for filtering the displayed events, and the creation time of the event list.

Opens the View Selector from which you can select one of the available Views. If you have appropriate permissions, the selected view can be deselected by selecting <No Filter>.

You can also configure users and groups so that they can see only the events filtered by views associated with that user or group. You can also allow users or groups to deselect the selected view and display all events.

On the first load of the Event Browser no view is selected. The selected view is restored when the Event Browser instance is reopened.

The five most recent selections are displayed at the top of the list.

Opens the Select a View dialog box, enabling you to select the view that you want to apply. The contents displayed in the Event Browser are limited to the CIs selected by the view.

If you have the appropriate permissions, you can also clear the view filter. Users without this permission can only see events that are related to CIs that are contained in the selected view. For details, see How to Grant Permissions on Views in Roles.

From the Browse Views dialog box, you can also open the Modeling Studio from which you can manage views.

For more information about views, see Define and manage views.

Opens the Event Filter Selector from which you can select one of the available event filters. The selected filter can be deselected by selecting <No Filter>.

The five most recent selections are displayed at the top of the list.

Opens the Select an Event Filter dialog box, enabling you to select the event filter that you want to apply.

From the Select an Event Filter dialog box, you can also open the Create New Event Filter dialog box to create an event filter, test, edit or delete an existing event filter.

For more information about the event filters, see Event Filters.

Entered text string is used to search the text displayed in the Event Browser and display only the events containing the specified string. Clearing the field displays all events again.

If you are also filtering by CIs, selecting a different CI clears the search field.

Opens the Create New Annotation dialog box for all selected events. The annotation is associated with all selected events on saving.

For more information about annotations, see Annotations.

Sets the lifecycle status for the selected events to Closed and resets the associated HI value to the default value for the selected events and on all symptom events of the selected events that are not already closed.

Opens the Indicators manager in a new window. You need the appropriate authorization to access the Indicators manager and other Administration features.

Opens the Policy Management UI in a new window.

If available, opens the OMi Performance Dashboard page in a new window. The OMi Performance Dashboard page enables you to create and configure a performance dashboard. For more information, see Performance Pane.

Opens the Policy Editor enabling you to edit policy templates. Only the policies present in the Monitoring Automation policy inventory can be opened for editing.

For information on how to deploy policy templates, see Policy Templates.

Opens the Assignments and Tuning UI by using the CI ID of the related CI, which results in displaying a list of all assignments for the particular CI. For more information, see Assignments and Tuning.

Opens the Tools manager in a new window. You need the appropriate authorization to access the Tools manager and other Administration features.

Opens the View Mappings manager in a new window. You need the appropriate authorization to access Administration features.

Opens the Custom Actions menu from which you can select a custom action from a list of those configured for the CI type associated with the selected event.

Opens the Run Books menu from which you can select a Run Book from a list of those configured for the CI type associated with the selected event.

Opens the Tools menu from which you can select a tool from a list of those configured for the CI type associated with the selected event.

Manually recalculates the priorities for selected events in the Event Browser.

If the Business Criticality was changed for one or more CIs related to events in the Event Browser, a recalculation assigns new priority values for these events.

Selects all events displayed in the Event Browser.

If available, the Application Summary report is displayed for the selected event created by BPM.

If available, the BPM Performance Analysis report is displayed for the selected event created by BPM.

If available, the BPM Triage report is displayed for the selected event created by BPM.

Opens a new window and displays the Business Service Impact for CI associated with the selected event.

Displays information about the most recent changes to the CI related to the selected event.

Data can also be displayed for the child CIs which have an Impact relationship with the selected CI. If you clear the Show data for child CIs check box, data is only shown for the selected CI.

By default, actual changes and incidents are shown for the past week. The requests for change area shows the changes planned during the previous week, and those that are planned for the coming week.

Displays the Closed Events Browser with closed events that are associated with the host system where the selected event occurred.

Click the Hide Closed Events button to return to the Event Browser.

Opens the Closed Events Browser Configuration dialog box in which you can configure a filter for the closed events that you want to see. The Closed Events Browser displays the closed events that are associated with the CI related to the selected event. See also View closed events.

Click the Hide Closed Events button to return to the Event Browser.

Opens the event details for an event in a pop-up window and displays all available information about the event.

Opens the event in the source manager user interface.

Opens the event in the external application that is responsible for managing the event.

Displays only events that concern the Node CI to which the selected event is related.

Opens a new Event Browser window that displays events associated with the selected CI only.

If available, displays performance dashboards for the selected CI in a new window.

If available, the RUM Event Summary report is displayed for the selected event created by RUM.

If available, the RUM Performance Analysis report is displayed for the selected event created by RUM.

If available, the RUM Triage report is displayed for the selected event created by RUM.

Opens the event in the Policy Management OpsCx user interface.

Opens the Related Events tab of the Event Details dialog box which indicates the relationship of the selected event to other events. The information displayed is the same as that available in the event details pane.

Forwards the selected event to a configured external manager application. Used when the operator is not able to solve the problem and needs to escalate the issue, for example, create a Service Manager incident. The external manager can be configured to return an incident ID to OMi as forwarding information.

• Select All Events/Clear All Event Selection: Click to select or clear all event check boxes. If there is a partial selection and you clear the Event Browser header check box, all check boxes will be cleared. For more information on selection check boxes, see Configure the Event Browser.

Automatic Action: Indicates if an automatic action is attached to the event and describes its status using the following icons:

— Not run automatic action available for event

— Automatic action is running

— Automatic action executed successfully

— Automatic action failed to execute successfully

Correlation: Indicates if the event has any related events that are hidden as a result of a correlation. The following icons indicate the event's position in a chain of events:

— Event is a cause in a correlation

— Event is a cause in one correlation and a symptom in another

— Event is a symptom in a correlation

For details about correlated events, see Related Events.

Duplicate Count: Indicates how many duplicate events exist (for example, 2 or 3).

Instructions: Indicates if the event contains any Instructions.

Instructions are configured in the policy that generates the event and might include, for example, details describing automatic and operator-initiated actions, or manual steps to follow for problem resolution.

Annotations: Indicates if the event contains any annotations. Annotations are comments or observations relating to the associated (or a similar) event. The following icon indicates the presence of annotations:

— Event has annotations

For more information about annotations, see Annotations.

Owned in HPOM: Indicates whether the event is owned by a user in OM (Y). If the event is owned by an OM user, the user name is displayed with the prefix OM:, for example, OM:Database Operator in the User field (Event Browser and General tab).

Control Transferred: Indicates if the responsibility for the associated event was transferred to an external manager.

User Action: Indicates if a user action is attached to the event and describes its status using the following icons:

— Not run user action available for event

— User action is running

— User action executed successfully

— User action failed to execute successfully

Application: Application that caused the event to occur.

Category: Name of the logical group to which the event belongs (for example, Database, Security, or Network). An event category is similar in concept to a message group in OM.

CI Hint: Information that helps to resolve the related CI, for example, Service name in OM event.

CI Type: Configuration item type associated with the event.

Company: A default custom attribute that is configured in the Available Custom Attributes infrastructure setting (in Administration > Setup and Maintenance > Infrastructure Settings > Applications > Operations Management - Custom Attribute Settings).

Core ID: Host system where the event occurred.

Description: Optional information about the event in addition to the event's original title and the text captured from the event source.

Event Type Indicator: Display name of the event type indicator (ETI) reported by the selected event and the current value, (for example, Web application state: Slow).

WebAppState is the name of the event type indicator. The corresponding label is Web application state, which is shown in the General tab. The level of the current ETI value is Slow.

If event type indicators are assigned (see the Source Info tab) but are not being resolved (event type indicator field in General tab is empty), the configuration must be corrected.

Event Age: Displays the time elapsed since the event was created. The event age is updated when the data in the Event Browser is automatically synchronized with the database every minute or when the Event Browser is manually refreshed.

External ID: ID of the event assigned by the external manager.

Assigned Group: Name of the group to which the selected event is assigned.

ID: ID of the event. Same as the ID of the message in OM if it is forwarded to OMi.

Node: Host system where the event occurred. The link opens the CI Properties dialog box of the CI.

Node Hint: Information used to identify node CI. For example, the hostname in OM used to find host in the RTSM:

• DNS name of the originating server.

• Node ID of the originating server.

Object: Device such as a computer, printer, or modem.

Originating Server: Management server that initially forwarded the original event along the chain of servers configured in a flexible management environment.

Priority: Priority assigned to the selected event (for example, Low, Medium, or High).

Name of the impaired configuration item where the event occurred.

If the Related CI includes a subcomponent, it is displayed as follows: Related CI: Subcomponent. For example, Server1: CPU1.

Sending Server: Last server in the OM flexible management chain that forwarded the event to OMi.

Severity: Severity assigned to the selected event. Usually, this is the same as the severity status of the original event, for example, received from OM. The following icons indicate event severity status:

— Critical

— Major

— Minor

— Warning

— Normal

— Unknown

Solution: Text field used to document solutions to help operators solve the problem indicated by the event.

Source CI: Node where the monitoring agent or probe is running that generated the selected event.

Source CI Hint: Information used to identify the source CI.

Lifecycle State: Point in the event lifecycle that the selected event has reached:

— Open

— In Progress

— Resolved

— Closed

To change an event's lifecycle status, select the event, and select one of the status buttons above the event list or use the context menu options. User authorizations control the permissions to change lifecycle states.

Subcategory: Name of the logical subgroup (category) to which the event belongs (for example, Oracle (database), Accounts (security), or Routers (network)).

Time Created: Date and time when the event was created.

Time First Received: Date and time when OMi first received notification of the event.

Time Received: Date and time when the (last duplicate) event was received.

Time Lifecycle State Changed: Date and time when the last lifecycle state change took place.

Title: Brief summary of the event.

Type: Type of message in OM. String used to organize different types of events within an event category or subcategory.

Assigned User: Name of the network user who is responsible for solving the event's underlying problem. For example, if the event is owned by an OMi user, the user name is displayed. If the event is owned by an OM user, the user name is displayed with the prefix OM:, for example, OM:Database Operator.

Workspaces > Operations Console > <select a perspective>

Then click the Show Closed Events button.

The maximum number of events that can be displayed in the Closed Events Browser can be configured in the Infrastructure Settings Manager.

For more information about viewing closed events, see View closed events.