3.20 Adding Events to an Incident

To perform this function you must have user permissions to Modify Incident(s) and Add to existing Incident(s).

  1. In a Real Time Event Table or a Snapshot, select an event or a group of events and right-click. Click Add To Incident.

  2. In the Add Events To Incident dialog box, click Browse to list the available incidents.

    The Select Incident window displays.

  3. Click Search to view a list of incidents with the selected criteria.

    You can define your criteria to search for a particular incident or incidents in Select Incident window.

  4. Select an incident and click Add.

  5. Click OK. The event or events selected are added to the incident in the Incidents Navigator.

    If events are not initially displayed in a newly created incident, it is probably because of a lag in the time between displaying in the Real Time Events window and insertion into the database. If this occurs, it takes a few minutes for the original events to be inserted into the database and display in the incident.