On the incident Automation tab, you can define how the system changes the properties of an incident and how it responds automatically to user actions, events, and other incident events.
Configure a flowchart using flowchart activities. The available activities are
described in following sections. If there are errors in your flowchart, error messages appear
at the bottom of the Automation tab.
Incident management activities
The following incident management activities are available:- Aggregate event
- Must come immediately after the Wait for event activity. Add the event that matched the Wait for event activity to the event history associated to this incident.
- Change additional field value
- Update the value of user defined Additional fields using user input or inputs aggregated from the specified events.
- Change description
- Replace the incident description with the specified text.
- Change incident state
- Forcibly change the incident to the specified state, regardless of its current state.
- Change incident type
- Change the incident type. You can transition from normal to normal, normal to
collaborative, or collaborative to collaborative incident types.
This activity must be last in the automation workflow because it ends the current automation workflow and starts a new automation workflow using the new incident type.
NOTE: The Wait for TTR event, including time to response not respected and time to resolution not respected events, can only be triggered once. If an incident type is changed using this automation workflow activity, these events cannot be triggered a second time. - Change priority
- Change the incident priority to the specified priority.
- Close incident
- Close the incident when its state changes to the specified state. Specify the following:
- State
- Set the state that the incident must reach to trigger the Close incident activity.
- Delay
- Set the number of seconds, minutes, or hours after which the incident must be closed.
- Column color
- Highlight the incident in the incident list by changing the background color of the selected columns or the entire row. To remove the highlight, change the color back to default. There is a custom palette of colors available in addition to the basic palette.
- Dispatch Incident
- Send the incident to selected users or user groups. Select one of the following options:
- Forward
- Forward the incident to additional recipients.
- Transfer
- Transfer the incident to selected recipients.
- Enable/Disable state transition
- Enable or disable the option to manually change an incident state in the
Incident monitoring task.NOTE: This does not affect the system's ability to change the incident state if the Change incident state activity is configured in the incident automation workflow. Users who have the Forcibly close unresolved incidents or Forcibly resolve incidents having non-validated steps privilege can also override this selection.
- Export incident
- Export the incident to a specified folder in either XML, PDF, or HTML format.
- Reminder
- Display a reminder in the notification tray of all incident recipients who are online.
- Recurrence
- The interval at which the reminder
notification is displayed throughout the life of the incident. Select one of the
following:
- Every minute
- Every minute.
- Hourly
- At a specified minute of every hour.
- Daily
- At a specified time every day.
- Weekly
- At a specified day and time every week.
- On startup
- Immediately.
- Interval
- At a regular time interval in days, hours, and minutes, starting from the time the reminder is created.
- Display a specific message
- Display a text message with the incident reminder.
- Trigger incident
- Incident type to trigger every time the reminder is displayed.
- Trigger and add sub-incident
- Trigger a sub-incident and add it to a collaborative incident.NOTE: This activity is only valid when triggered in the automation workflow of either a collaborative incident or a sub-incident of a collaborative incident. When used in the automation workflow of a sub-incident, the incident triggered in this activity will be aggregated to the parent collaborative incident.
- Trigger incident
- Trigger an incident. You can optionally include a comment and the area where the incident occurred.
- Wait for dynamic user procedure steps
- Wait for one dynamic user procedure step from this incident type to be resolved with a specific answer. You can specify multiple steps, and this activity will wait for the first among the selected steps to be resolved.
- Wait for event
- Wait for an event to occur. You must specify the following:
- Event category
- Security Center or any custom plugin that is installed.
- Wait for event
- The event you are waiting for. Select one of the following:
- Any event
- All events match your criteria.
- Any event except
- Specify a list of events that do not match your criteria.
- Specific events
- Specify a list of events that match your criteria.Tip: Click to add precision to the event filtering using parameters such as Priority, State, Trigger entity, and so on.
- Previous event
- The event that must precede the event you are waiting for. Select one of the following:
- Don't care
- A previous event is unnecessary.
- Any event
- Any event is acceptable.
- Any event except
- Any event is acceptable except the ones you include in the exclusion list.
- Specific events
- Only an event found in the specified list is acceptable.
- Event source and alarm configuration options
- Choose to configure Event sources and Related
alarms or select the Aggregate all related alarm
instances option.
- Event source
- Specify the common source for your events.
- Don't care
- The source is not important.
- Specific source
- Specify a list of entities that are eligible as event source.
- Any source except
- Any source is acceptable as long as it is not found in the specified exclusion list.
- Incident location
- The entity on which the incident is active. It may be an area, video entity, door, and so on.
- Incident area
- The area in which the incident is active. Child entities of this area are included, unless they are area entities.
- Related alarms
- Specify alarms associated with the incident.
- Don't care
- The source is not important.
- Specific source
- Specify a list of alarms that impact incident management.
- Incident alarms
- Aggregates events from a previously aggregated alarm.
- Add custom field
- You can select relevant custom fields such as Alarm context.
- Wait for incident priority
- Wait for any or a specified incident priority.
- Wait for incident state
- Wait for any or a specified incident state.
- Wait for TTR event
- Wait for incident response time not respected, incident resolution time not respected,
or the first of either event to occur. You must specify at least one of the following:
- Granted incident response time not respected
- Trigger when the maximum response time granted to this incident type has not been met.
- Granted incident resolution time not respected
- Trigger when the minimum or maximum time granted to resolve this incident type has not been met.
- dynamic user procedure step resolution time not respected
- Trigger when the minimum or maximum time granted to resolve one or more dynamic procedure steps for this incident type has not been met.
Security Center activities
Only the following Security Center actions are supported as flowchart activities:- Acknowledge alarm
- Acknowledges the alarm that triggered this incident and any additional alarm instances
that have been aggregated to this incident. Select one of the following:
- Acknowledged (Default)
- The system automatically acknowledges the alarm.
- Acknowledged (Alternate)
- The system automatically acknowledges the alarm using the alternate mode.
- Acknowledged (Forcibly)
- The system forcibly acknowledges the alarm.
- Arm zone
- Arms the selected Virtual zone.
- Cardholder
- Activates or deactivates cardholders related to the incident or all cardholders enrolled in the system.
- Credential
- Activates or deactivates credentials related to the incident or all credentials enrolled in the system.
- Disarm zone
- Disarms the selected Virtual zone.
- Display entity
- Displays a selected entity in the Security
Desk
Monitoring task of configured recipients. You must specify the following:
- User, User group
- The user or user group who will receive the selected entity.
- Owner only
- When selected, only the incident owner will receive the selected entity. This setting overrides other configured recipients.
- Display entity
- The entity to display.
- Video mode
- The following options are available for camera entities:
- Live
- Playback from current time
- Playback from incident trigger time
- Maintenance
- Choose to turn on or turn off maintenance mode for selected source entities related to the active incident.
- Play a sound
- Plays a sound bite in a user or user group’s Incident monitoring
task in Security
Desk. This action is
ignored if the user's Incident monitoring task is not open. You
must specify the following:
- User, User group
- Select a user or user group.
- Sound to play
- Select the .wav file to play. The standard alert sound files that come with the installation are located in C:\Program files\Genetec Security Center <Version>\Audio.
- PTZ command
- Commands the PTZ camera to perform an action. You must specify the following:
- Action
- The PTZ action to perform. Select one of the following:
- Go to preset
- Commands the PTZ camera to go to the specified preset.
- Run a pattern
- Commands the PTZ camera to run the specified pattern.
- Go home
- Commands the PTZ camera to go to its home position. Not all PTZ cameras support this feature.
- Camera
- The PTZ camera to perform the selected action.
- Public addressing
- Send an .mp3 or .wav audio message to
selected recipients or to the incident location.NOTE: A compatible Sipelia™ version must be installed on the Genetec Mission Control™ server. For more information about configuring Sipelia™ Public address, see the Sipelia™ User Guide.
- Reboot unit
- Reboots one or more units. You can select a dynamic source, such as incident location, or a static source, such as a video unit or an access control unit.
- Reset area people count
- Resets the people counter in the selected area.
- Run a macro
- Executes the selected macro. You must specify an execution context:
- Use default execution context
- Context variables are populated with values from the Default execution context page of the macro in Config Tool.
- Override context manually
- Context variables are populated with values that you specify in the automation workflow activity.
- Override context using incident properties
- Specific context variables are populated with the matching incident property.
- Send an email
- Sends an email to a user or user group. All selected recipients must have an email
address set up in their profile, and the mail server must be configured for Security Center, or the action is ignored. Specify the following:
- Recipients
- The users or user groups who should receive the email.
- Subject
- The email subject.
- Message
- The email message.
- Add field
- Add context variables such as
Incident ID
,Source entities
, and more to the subject, message, or both. Before sending the email, these variables are automatically populated with information from the incident. - Latest Activity
- Add one or more of the following placeholders to the
Message field:
- System actions
- Comments
- SOP completion
- Monitoring
- Warnings
- TTR Events
- Notes
These placeholders are automatically populated with the latest information when the email is sent.
- Set threat level
- Sets a threat level on your Security Center
system, or the incident location. You must specify the following:
- Threat level
- The threat level to set.
- Area
- The area to set the threat level on. The area can be your entire system, or the incident location.
- Trigger alarm
- Triggers one or more alarms. This action might generate additional events, depending
on the alarm configuration. You can aggregate all the alarms triggered to the incident
by selecting the Aggregate alarms option.NOTE: You must select the Aggregate alarms option for the alarm to be acknowledged by the Acknowledge alarm activity.
- Trigger output
- Triggers one or more entity outputs. You can select the desired output behavior.
For more details on output behaviors, see About output behaviors and Output behavior - Properties tab in the Security Center Administrator Guide.
- Unlock door explicitly
- Temporarily unlocks the specified door for five seconds, or the standard grant time configured for that door.
Generic activities
The following activity types are generic flowchart activities. You can use them to hide details from your top-level flowchart.- Conditional activities
- Add
IF-ELSE
conditions. - Delay
- Pause the automation workflow for the specified duration.
- Flowchart
- Add a flowchart.
- Parallel tasks
- Add a node for parallel tasks. Each parallel task can be an activity, a flowchart, or
a sequence of activities. By default, you exit the node when all of the parallel tasks
are completed, or you can exit when just one of the parallel tasks is complete.CAUTION:If a parallel task contains an infinite loop and you select Exit when all branches are completed, this activity might continue until the incident is closed.
- Sequence
- Add a sequence of activities.
Watch this video to learn more. Click the
Captions icon (CC) to turn on video
captions in one of the available languages.
NOTE:
Although we do our best to keep our videos current, the
information presented in this video might become outdated with each new release. If you
find anything wrong with this video, feel free to contact
us.