Acknowledging Events¶

Once an Event has investigated and/or resolved, it should be acknowledged to clear it from all Alarm Monitor views. This reduces the volume of active Alarms and/or Events at any given time and can further streamline investigative processes.

Acknowleding Events is part of Plixer Scrutinizer’s recommended investigation and resolution workflow.

Hint

To show/hide acknowledged Events in the Alarm Monitor views, open the filter options tray and toggle the Show Acknowledged Events option on/off.

Acknowledging can be done by Alarm Policy or by Event.

Acknowledging by Policy

From the main view of the Policies tab, acknowledging an Alarm Policy automatically flags all Events generated under the Policy as acknowledged.

To acknowledge by Alarm Policy:

  1. While on the Policies tab of the Alarm Monitor view, select the Policy by ticking its checkbox.

  2. If acknowledging more than one Policy, verify that the correct Policies have been selected.

  3. Click Acknowledge Selected Events.

Note

The Acknowledge Selected Events button is only available when at least one Policy checkbox is ticked.

Once acknowledged, the Alarm Policy and all Events associated with it will be hidden from all Alarm Monitor views.

Acknowledging by Events

Acknowledging can also be used to clear only Events that match the same criteria. This allows other Events under the same Policy (as well as the Alarm Policy itself) to be retained in the Alarm Monitor views.

Events are acknowledged from the summary view of the Policies tab as follows:

  1. Scroll down to the Event List section of the page.

  2. Select the Artifact linked to the criteria/Events to be acknowledged by ticking its checkbox.

3. If selecting more than one Artifact, verify that the correct checkboxes have been ticked. 3. Click Acknowledge Selected Events.

Note

The Acknowledge Selected Events button is only available when at least one Policy checkbox is ticked.

Once acknowledged, the Event(s) will be hidden from all Alarm Monitor views.