2.20 Adding Events to an Incident

To perform this function you must have user permissions to Modify Incident(s) and Add to existing Incident(s).

To add events to an incident:

  1. In a Real Time Event Table or a Snapshot, select an event or a group of events and right-click. Click Add To Incident.

  2. In the Add Events To Incident dialog box, click Browse to list the available incidents.

  3. Select Incident window displays. Click Search to view a list of incidents. List of incidents of selected criteria displays.

    NOTE:You can define your criteria to better search for a particular incident or incidents in Select Incident window.

  4. Highlight an incident and click Add.

  5. Click OK. The event or events selected are added to the incident in the Incidents Navigator.

    NOTE:If events are not initially displayed in a newly created Incident, it is most likely because of a lag in the time between display in the Real Time Events window and insertion into the database. If this occurs, it will take a few minutes for the original events to finally be inserted into the database and display in the incident.