Incidents Tab
The Incidents tab provides visibility into incident tickets associated with network devices. Summary metrics and visualizations show incidents by priority, status, age and date as well as devices associated with incidents.
Key components
The Incidents tab includes tools to search and apply different filters to narrow results. Under the general information, you find the global filter with the following tools:
- Search
- Severity level
- Retention period
- Custom Range
Search
The Search functionality is located at the beginning of the global filter. Use the Search box to locate specific information.
Severity level
The Severity Level filter is located in the global filter, next to the search box. You can select one option from the drop-down menu:
- All
- Critical
- High
- Medium
Retention
The retention period is set to 30 days as default; however, you can change it according to the period you like to filter:
- 7 days
- 14 days
- 30 days
- 60 days
- 90 days
- 180 days
Custom Range
The Custom Range allows you to filter by a specific date, month and year. Click on the calendar icon and select the start date and the end date.
Reset
The Reset button allows you to reset all of the filters to the default settings.
Summary cards
The Summary cards provide a snapshot of key incident metrics. The cards display the number of incidents by priority level and status, allowing you to quickly review the volume of Priority 1 through Priority 4 incidents and the number of open and closed incidents.
- Priority 1: Displays the number of Priority 1 incidents.
- Priority 2: Displays the number of Priority 2 incidents.
- Priority 3: Displays the number of Priority 3 incidents.
- Priority 4: Displays the number of Priority 4 incidents.
- Open: Displays the number of incidents with an Open status.
- Closed: Displays the number of incidents with a Closed status.
Click the arrow on a card to access additional information in a tabular format; see Account Vulnerability Details Page Vulnerability Details Page for more information.
Open Incident Tickets
The Open Incident Tickets chart displays the volume of open tickets over time, grouped by priority. The horizontal axis represents the date range, while the vertical axis represents the volume of incident tickets. Separate lines represent Priority 1, Priority 2, Priority 3 and Priority 4, allowing you to compare changes in open incident volume across priority levels.
Element | Description |
|---|---|
Date | Displays the date ranges represented in the chart. |
Volume | Displays the number of open incident tickets. |
Priority 1 | Represents open incident tickets classified as Priority 1. |
Priority 2 | Represents open incident tickets classified as Priority 2. |
Priority 3 | Represents open incident tickets classified as Priority 3. |
Priority 4 | Represents open incident tickets classified as Priority 4. |
View total tickets | Provides a toggle for viewing total ticket information in the chart. |
Legend | Identifies the color associated with each priority level. |
Click the View total tickets control on the top right to show information on the Total Tickets.
Click the arrow on the card to access additional information in a tabular format; see Account Vulnerability Details PageAccount Vulnerability Details Page for more information.
Closed Incident Tickets
The Closed Incident Tickets chart displays the volume of closed incident tickets over time, grouped by priority. The horizontal axis represents the date range, while the vertical axis represents the volume of closed incident tickets. Separate lines represent Priority 1, Priority 2, Priority 3 and Priority 4, allowing you to compare changes in closed incidents volume across priority levels.
Element | Description |
|---|---|
Date | Displays the date ranges represented in the chart. |
Volume | Displays the number of closed incident tickets. |
Priority 1 | Represents closed incident tickets classified as Priority 1. |
Priority 2 | Represents closed incident tickets classified as Priority 2. |
Priority 3 | Represents closed incident tickets classified as Priority 3. |
Priority 4 | Represents closed incident tickets classified as Priority 4. |
View total tickets | Provides a toggle for viewing total ticket information in the chart. |
Legend | Identifies the color associated with each priority level. |
Click the View total tickets control on the top right to show information on the Total Tickets.
Click the arrow on the card to access additional information in a tabular format; see Account Vulnerability Details PageAccount Vulnerability Details Page for more information.
Incidents by Priority
The Incidents by Priority card displays the percentage distribution of incidents across Priority 1, Priority 2, Priority 3 and Priority 4. The doughnut chart provides a visual comparison of the proportion of incidents associated with each priority level.
Click the arrow on the card to access additional information in a tabular format; see Account Vulnerability Details PageAccount Vulnerability Details Page for more information.
Mean Time to Resolve (MTTR)
The Mean Time to Resolve (MTTR) card displays the average time, in hours, to resolve incidents for each priority level. The horizontal bar chart provides a visual comparison of Mean Time to Resolve across Priority 1, Priority 2, Priority 3 and Priority 4.
Element | Description |
|---|---|
Priority 1 | Displays the MTTR for Priority 1 incidents. |
Priority 2 | Displays the MTTR for Priority 2 incidents. |
Priority 3 | Displays the MTTR for Priority 3 incidents. |
Priority 4 | Displays the MTTR for Priority 4 incidents. |
Hours | Represents the MTTR, measured in hours, for each priority level. |
Click the arrow on the card to access additional information in a tabular format; see Account Vulnerability Details PageAccount Vulnerability Details Page for more information.
Mean Time to Detect (MTTD)
The Mean Time to Detect (MTTD) card displays the average time, in hours, to detect incidents for each priority level. The horizontal bar chart provides a visual comparison of Mean Time to Detect (MTTD) across Priority 1, Priority 2, Priority 3 and Priority 4.
Element | Description |
|---|---|
Priority 1 | Displays the MTTD for Priority 1 incidents. |
Priority 2 | Displays the MTTD for Priority 2 incidents. |
Priority 3 | Displays the MTTD for Priority 3 incidents. |
Priority 4 | Displays the MTTD for Priority 4 incidents. |
Hours | Represents the MTTD, measured in hours, for each priority level. |
Click the arrow on the card to access additional information in a tabular format; see Account Vulnerability Details PageAccount Vulnerability Details Page for more information.
Incidents by Age
The Incidents by Age card displays the volume of incidents grouped by age and priority level. The horizontal axis represents the incident volume, while the vertical axis groups incidents into 0-7 days, 8-14 days, 15-30 days and 60+ days. The stacked bars show the distribution of Priority 1, Priority 2, Priority 3 and Priority 4 incidents with each age range.
Element | Description |
|---|---|
Age | Groups incidents according to the number of days represented by each age range. |
Volume | Displays the number of incidents within each age range. |
Priority 1 | Represents Priority 1 incidents within each age range. |
Priority 2 | Represents Priority 2 incidents within each age range. |
Priority 3 | Represents Priority 3 incidents within each age range. |
Priority 4 | Represents Priority 4 incidents within each age range. |
Legend | Identifies the color associated with each priority level. |
Click the arrow on the card to access additional information in a tabular format; see Account Vulnerability Details PageAccount Vulnerability Details Page for more information.
Open and Closed Incident Tickets
The Open and Closed Incident Tickets card compares the volume of open and closed incident tickets across the displayed date ranges. The grouped bar chart uses separate bars for Open Tickets and Closed Tickets, making it easier to compare ticket volumes over time.
Element | Description |
|---|---|
Date | Displays the date ranges represented in the chart. |
Volume | Displays the number of incident tickets. |
Open Tickets | Represents the volume of open incident tickets for each date range. |
Closed Tickets | Represents the volume of closed incident tickets for each date range. |
Legend | Identifies the colors associated with open and closed tickets. |
Dropdown | Provides options for refining the information displayed in the chart based on the priority levels. |
Click the arrow on the card to access additional information in a tabular format; see Account Vulnerability Details PageAccount Vulnerability Details Page for more information.
Top Network Devices with Incidents
The Top Network Devices with Incidents card displays network devices and the number of incidents associated with each device. The list provides a quick comparison of incident volume across the displayed devices.
Click the arrow on the card to access additional information in a tabular format; see Account Vulnerability Details PageAccount Vulnerability Details Page for more information.