Change Auditor 7.5 - User Guide

Alert History page

Alert History page

The Alert History page is accessed by selecting an alert enabled search, right-clicking and selecting Alert | History. This page displays details regarding the events that triggered the selected alert, including the time the alert was triggered, if the alert was successfully sent, a description of the event that triggered the alert and, if applicable, an error message stating the alert was not sent.

NOTE: Regardless of the alert state (enabled or disabled) the alert history for an alert-enabled search is always available until it is removed using Alert | Delete History.

The data grid on this page contains the following information for each event that triggered an alert:

 

Table 2. Alert History page: Field descriptions

Column	Description
Time Alerted	Displays the time the alert occurred.
Alert Type	Displays ‘Email, SNMP, or WMI’ for the type of alert that was generated.
Alerted	Indicates whether the alert was successfully sent: Yes or No.
Description	Displays a description of the events that caused this alert to be triggered.
Message	Displays an error message if the alert was not successfully sent.

View alert history

View alert history

For each enabled alert, two additional context menu commands become available whenever you right-click an alert-enabled search definition on the Searches page: Alert | History and Alert | Delete History.

NOTE: The Alert | History and Alert | Delete History right-click commands are available for any search that has ever had an alert enabled in the current product version, regardless of its current state. These commands are not available for disabled alerts, only after the alert history has been deleted using Alert | Delete History.

To view the alerts triggered for a search:

1	On the Searches page, select an alert-enabled search definition, right-click, expand the Alert command and select History.

This opens a new Alert History page, which displays details regarding the alerts triggered for the selected search.

To delete alert history:

1	On the Searches page, select an alert-enabled search, right-click, expand the Alert command and select e Delete History.

This clears the alert history for the selected alert.

NOTE: Change Auditor deletes alerts in batches of 1000, so the alert history will not be immediately cleared; however, refreshing the screen will show the number of alerts decreasing.

View event details or alert properties

View event details or alert properties

From an Alert History page, you can view the alert properties (Alert tab) used to generate the displayed alerts or access more detailed information about an individual alert. Using the tool bar buttons at the top of an Alert History page, you can easily switch between the Alert tab and Event Details pane.

To display event details for an alert:

1	Open an Alert History page and select an alert from the grid.

2	If neither the Alert tab or Event Details pane are being displayed (or the Alert tab is displayed), use one of the following methods to display the event details:

▪	double-click the alert entry in the results grid

▪	click the Event Details tool bar button

▪	right-click the alert and select Event Details

3	To hide the Event Details pane, use the hide button in the upper right corner of the Event Details pane.

To display the alert properties for an alert:

1	Open an Alert History page and select an alert from the grid.

2	If neither the Alert tab or Event Details pane are being displayed (or the Event Details pane is displayed), use one of the following methods to display the search properties:

▪	click the Alert Properties tool bar button

▪	right-click the alert and select Alert Properties

3	To hide the Alert tab, use the hide button in the upper right corner.

Administration Tasks

Administration Tasks

•	Administration Tasks tab

•	Administration Task lists

•	Export/import Administration Task settings