Viewing the list of incidents
To view the incident list,
In the Management Console tree, select the Incidents node.
The table of incidents is displayed in the workspace of the node.
This table lists incidents that may include new incidents, incidents in progress, processed incidents, and incidents restored from the archive. This list does not include archived incidents.
The table contains the following columns:
- No. A sequential number assigned to an incident when it is created.
- Status. Incident status. Incident status reflects the stage of incident processing. For example: New – the incident has been generated but has not been processed yet; Closed (processed) – the incident investigation has been completed, and the required actions have been taken.
- Subject. The content of the "Subject" field of the message that caused the application to generate an incident during scanning.
- Sender. The content of the "From" field of the message that caused the application to generate an incident during scanning.
- Recipients. Addresses of all recipients specified in the "To", "CC", and "BCC" fields in the header of the message that caused the application to generate an incident during scanning.
- Date. The date and time of incident generation. Displayed in the format defined in the regional settings of the computer.
- Category. The name of the data category based on which the incident has been generated.
- Policy. The name of the policy that was violated and based on which the incident has been generated.
- Priority. The priority assigned to the incident when it was generated (Low, Medium or High). The priority reflects the urgency with which the incident has to be processed. The priority is assigned based on the value specified in the settings of the policy that has been violated.
- Action. The action performed on the message (Skipped, Deleted). The action to be taken on the message is specified in the policy.
- Violations. The number of message text fragments that caused a policy violation.
- Message ID. Unique ID of message. The content of the "Message-ID" field of the message header.
- Server name. The name of the mail server on which the incident was generated.
- Manager. The name of the account of the sender's manager. If information about the manager's account is unavailable, the field contains the “n/a” value.
By default, the table displays all of the columns, except for Message ID, Server name, and Manager. You can change the set of columns by clicking the Select columns button. The No column is always displayed.
You can change the order in which columns appear by dragging their headers with the mouse pointer.
You can sort the table contents in ascending or descending order by left-clicking the column headers.
It is recommended not to store a large number of incidents in the list. You are advised to archive processed incidents once the number of incidents in the list reaches 100,000.
The application does not support incident processing with more than 300,000 incidents in the list.
Page top