Viewing events included in an incident

For viewing events included in incidents, the following modes are provided in the events table:

• Simple viewing mode. In this mode, the events table displays all events without consideration of how events are nested in incidents.
• Tree display mode. In this mode, incidents are displayed as a tree structure with nested events and may be collapsed or expanded in the events table.

You can change the display mode when configuring the events table.

To expand or collapse rows containing information about embedded elements of an incident in tree display mode:

Click the or button in the cell containing the incident header.

Page top