Introduction

The Alert Listing application will provide a comprehensive and detailed list of alerts. This list provides specific information about each alert, including its source, severity level, timestamp, and any associated actions or recommendations.

Configuration Parameters

• Add Query: Use the query to select the entities that you wish to include in the report.
  • Query Builder: By default, the Query Builder button is selected. It comes preloaded with a default query to help users get started quickly without needing to write their own queries from scratch. Users can modify the query based on their needs: (status IN ("OPEN", "ACKNOWLEDGED", "TICKETED", "CORRELATED", "SUPPRESSED")) AND (createdTime >= '-7d')
  • Attribute Filters: When users select the Attribute Filters option, the interface displays native filter dropdown menus. These dropdowns allow users to select attributes by simply checking the options they want, instead of having to write complex OpsQL queries manually. This feature offers a preview option that allows users to view the matching results immediately after applying filters, enabling them to verify the data before proceeding to generate the final report.
• Client Selection: You can select a single client or all clients from the dropdown list. Only selected client data will get into the report.
• Attributes Selection: Specify the attributes of the selected entities that you wish to include as columns in the report.
  • Default attributes: The default attributes (Alert Id, Object Name, Object Type, Ip Address, Subject, Metric, Current State, Created Time, Is Inference Alert, Inference Id) will be populated by default. The user can modify/delete default attributes and select their required attributes, including custom attributes, to view in the report.
  • Only selected attributes related data will be included in the report. If no attributes are selected, the default attributes data will be included in the report.
  • You can customize the default attributes selection order by using the drag and drop functionality. You are allowed to select a maximum of 25 attributes.
• Alert By: Defines the alert to be presented by Created Time or Updated Time. If the user does not select this field or mention it in the query, it will default to createdTime as the value for this configured parameter.
• Analysis Period: The time period over which your environment was analyzed. The supported analysis periods are: Last 24 hours, 7 Days, Last Month, Last 3 Months, and Specific Period. This is an optional field. If the user does not select this field or mention it in the query, it will default to –7d as the value for this configured parameter.
• Supported Format: Reports are generated only in XLSX format.

Reports Output

Once the report is generated, it will consist of the following sections:

• Summary: This section provides the configuration details.
• Alerts and Inferences: This section presents a list of alerts and inferences that were triggered in your environment.
• Inferences and Uncorrelated Alerts: Here, you will find a list of inferences and uncorrelated alerts that were triggered in your environment.
• Glossary: This section contains detailed information about each section presented in the report tab, helping you to understand the generated data better.

Sample of reports in XLSX format:

Alert Report Vs Alert Listing Atrributes