On the incident Workflow page, you can define how the system changes the properties of an incident, and how it affects the system as an automatic response to user actions, events, and other incidents.
Configure a flowchart using flowchart activities. The available activities are
described in the three sections that follow. Errors found in your flowchart are signaled by
error messages at the bottom of the Workflow page.
Incident management activities
The available incident management activities are:- Aggregate event
- Must come immediately after the Wait for event activity. Add the event that matched the Wait for event activity to the event history associated to this incident.
- Change description
- Replace the incident description with the specified text.
- Change incident state
- Forcibly change the incident to the specified state, regardless of its current state.
- Change incident type
- Change the incident type. This activity ends the current workflow and starts a new
workflow using the new incident type.
This activity must be the last one in the workflow.
NOTE: Time to response not respected and time to resolution not respected events can only be triggered once. Changing an incident type using this workflow activity does not allow these events to be triggered a second time. - Change priority
- Change the incident priority to the specified priority.
- Close incident
- Close the incident when it reaches the specified state. The incident state is only
compared after the specified delay (default = 0 seconds). Select Reset delay
on state change if you want to reset the delay every time the incident
state changes during the countdown.
This activity must be the last one in the workflow.
- Column color
- Highlight the incident in the incident list by changing the background color of the selected columns (or the entire row). To remove the highlight, change the color back to default.
- Delay
- Pause the workflow for the specified duration.
- Dispatch Incident
- Sends the incident to selected users or user groups. Select one of the following
options:
- Forward
- Forward the incident to additional recipients.
- Transfer
- Transfer the incident to selected recipients.
- Export incident
- Export the incident with the default settings to a specified folder.
- Parallel tasks
- Add a node for parallel tasks. Each parallel task can be an activity, a flowchart, or
a sequence of activities. You can either exit the node the moment one of the parallel
tasks is completed, or when all of the parallel tasks are completed (Default).CAUTION:If a parallel task contains an infinite loop, selecting Exit when all branches are completed can cause this activity to continue until the incident is closed.
- Reminder
- Display a reminder in the notification tray of all incident recipients who are online.
- Recurrence
- When and how often the reminder
notification is displayed throughout the life of the incident. Select one of the
following:
- Every minute
- Every minute.
- Hourly
- At a specified minute of every hour.
- Daily
- At a specified time every day.
- Weekly
- At a specified day and time every week.
- On startup
- Immediately.
- Interval
- At a regular time interval in days, hours, and minutes, starting from the time the reminder is created.
- Display a specific message
- Text message to be displayed with the incident reminder.
- Trigger incident
- Incident type to trigger every time the reminder is displayed.
- Trigger incident
- Trigger an incident. You can optionally include a comment and the area where the incident occurred.
- Wait for dynamic procedure steps
- Wait for one dynamic procedure step from this incident type to be resolved with a specific answer. You can specify multiple steps, and this activity will wait for the first among the selected steps to be resolved.
- Wait for event
- Wait for an event to occur. You must specify the following:
- Event category
- Security Center, or any custom plugin (if one is installed).
- Wait for event
- The event you are waiting for. Select one of the following:
- Any event
- All events match your criteria.
- Any event except
- You must specify a list of events that do not match your criteria.
- Specific events
- You must specify a list of events that match your criteria.
- Previous event
- The event that must precede the event you are waiting for. Select one of the following:
- Don't care
- No previous event is necessary.
- Any event
- Any event is acceptable.
- Any event except
- Any event is acceptable except the ones you include in the exclusion list.
- Specific events
- Only an event found in the specified list is acceptable.
- Event source
- Specify the common source for your events.
- Don't care
- The source is not important.
- Specific source
- Specify a list of entities that are eligible as event source.
- Any source except
- Any source is acceptable as long as it is not found in the specified exclusion list.
- Incident location
- The event source must be the area where the incident occurred.
- Wait for incident state
- Wait for the specified incident state.
- Wait for TTR event
- Wait for response time not respected, resolution time not respected, or both to occur.
You must specify one or more of the following:
- Granted incident response time not respected
- Trigger when the maximum response time granted to this incident type has not been met.
- Granted incident resolution time not respected
- Trigger when the Minimum or Maximum time granted to resolve this incident type has not been met.
- Dynamic procedure step resolution time not respected
- Trigger when the Minimum or Maximum time granted to resolve one or more dynamic procedure steps for this incident type has not been met.
Security Center activities
Only the following Security Center actions are supported as flowchart activities:- Acknowledge alarm
- Acknowledges the alarm that triggered this incident and any additional alarm instances
that have been aggregated to this incident. Select one of the following:
- Acknowledged (Default)
- The alarm is automatically acknowledged by the system.
- Acknowledged (Alternate)
- The alarm is automatically acknowledged by the system using the alternate mode.
- Acknowledged (Forcibly)
- The alarm is forcibly acknowledged by the system.
- Arm zone
- Arms the selected virtual zone.
- Disarm zone
- Disarms the selected virtual zone.
- Display entity
- Displays a selected entity in the Security
Desk
Monitoring task of configured recipients. You must specify the following:
- User, User group
- The user or user group who will receive the selected entity.
- Owner only
- When selected, only the incident owner will receive the selected entity. This setting overrides other configured recipients.
- Display entity
- The entity to display.
- Video mode
- The following options are available for camera entities:
- Live
- Playback from current time
- Playback from incident trigger time
- Play a sound
- Plays a sound bite in a user or user group’s Security
Desk. This action is ignored if the user
is not running Security
Desk. You must
specify the following:
- User, User group
- Select a user or user group.
- Sound to play
- Sound file (.wav) to play. For the user to hear the sound bite, the same sound file must be installed on the PC where Security Desk is running. The standard alert sound files that come with the installation are located in C:\Program files\Genetec Security Center <Version>\Audio.
- PTZ command
- Commands the PTZ camera to perform an action. You must specify the following:
- Action
- The PTZ action to perform. Select on of the following:
- Go to preset
- Commands the PTZ camera to go to the specified Preset.
- Run a pattern
- Commands the PTZ camera to run the specified Pattern.
- Go home
- Commands the PTZ camera to go to its home position. Not all PTZ cameras support this feature.
- Camera
- The PTZ camera to perform the selected action.
- Reset area people count
- Resets the people counter in the selected area.
- Run a macro
- Executes the selected macro. You must specify one of the following
execution contexts:
- Use default execution context
- Context variables are populated with values from the Default execution context page of the macro in Config Tool.
- Override context manually
- Context variables are populated with values you specify in the workflow activity.
- Override context using incident properties
- Specific context variables are populated with the matching incident property.
- Send an email
- Sends an email to a user or user group. All selected recipients must have an email
address set up in their profile, and the mail server must be configured for Security
Center, or the action is ignored. Specify the following:
- Recipients
- The users or user groups who will receive the email.
- Subject
- The email subject.
- Message
- The email message.
- Add field
- Add context variables such as Incident ID, Source entities and more to the Subject, Message, or both. Before sending the email, these variables are automatically populated with information from the incident.
- Latest Activity
- Add placeholders for incident comments, completed SOP steps, or both to the Message. These placeholders are automatically populated with the latest information when the email is sent.
- Set threat level
- Sets a threat level on your Security
Center
system, or the incident location. You must specify the following:
- Threat level
- The threat level to set.
- Area
- The area to set the threat level on. Can be your entire system, or the incident location.
- Trigger alarm
- Triggers one or more alarms. This action might generate additional events, depending on the alarm configuration.
- Unlock door explicitly
- Temporarily unlocks the specified door for five seconds, or the Standard grant time configured for that door.
Generic activities
The following activity types are generic flowchart activities. They can be used to hide details from your top level flowchart or to configure parallel branches within the Parallel tasks activity.- Flowchart
- Add a flowchart.
- Sequence
- Add a sequence of activities.
Watch this video to learn more. Click the Captions icon (CC) to turn on video captions in one of the available languages. If using Internet Explorer, the video might not display. To fix this, open the Compatibility View Settings and clear Display intranet sites in Compatibility View.
NOTE: Although we do our best to keep our videos current, the
information presented in this video might become outdated with each new release. If you
find anything wrong with this video, feel free to contact
us