Responding to alarms - Security Center 5.12

You can view and respond to alarms in the Alarm monitoring task.

1. In the notification tray, click the Alarms () icon.
   The Alarm monitoring task opens. Alarms are added to the alarm list, and the canvas is populated according to the alarm display priority.
2. (Optional) To filter the alarm list, click the filter icon () and choose from the following filters:

   Show all

   Display all alarms (no filter).

   Show active

   Show active alarms.

   Show under investigation

   Show alarms that are currently under investigation.

   Show acknowledgment required

   Show alarms that are not acknowledged despite their acknowledgment conditions being cleared.

   Show acknowledged

   Show acknowledged alarms.

   Filtering the alarm list does not change the alarms displayed in tiles.

3. Select an alarm by doing one of the following:
   • Click an alarm in the report pane.
   • Double-click an alarm in the report pane to open it in a pop-up window.
   • Click an alarm in a canvas tile.
   NOTE: If you select an alarm from the list, that alarm is not selected in the canvas.
4. If the alarm is associated with video, view the alarm video in the canvas tile.
   Video is displayed with a colored overlay that provides the alarm details. If the alarm is not displayed in a canvas tile, double-click the alarm in the report pane to open the tile in a pop-up window. Alarm video is also available from the Maps task and the Monitoring task.
5. Process or modify the alarm as needed using the following actions:

   Acknowledge (Default) ()

   Acknowledge the alarm. The alarm is no longer active, and is removed from the canvas and the alarm list.

   NOTE: Certain alarms require you to report an incident when you acknowledge them. If you have the Bulk acknowledge alarms privilege, you can select and acknowledge multiple alarms at the same time with a single incident report.

   Acknowledge (Alternate) ()

   Set the alarm to the alternate acknowledged state. Your company defines the reasons to use this acknowledgment type. For example, you can use this to acknowledge a false alarm. This state can be used as a filter in alarm queries.

   Investigate ()

   Investigate the alarm. This action lets other users in the system know that you have seen the alarm without acknowledging it, so the alarm is not removed from the active alarm list.

   Forcibly acknowledge ()

   Force the alarm to be acknowledged. This is helpful for clearing alarms that are currently under investigation and their acknowledgment condition is not yet cleared.

   Forcibly acknowledge all alarms ()

   Forces all alarms across your Security Center system to be acknowledged. This button is only available to admin users. It is helpful for clearing alarms that are currently under investigation and their acknowledgment condition is not yet cleared.

   IMPORTANT: The Forcibly acknowledge all alarms button clears alarms that are not visible to the user.

   Snooze alarm ()

   Put the alarm to sleep for 30 seconds. When the alarm is snoozing, it is temporarily removed from the canvas. You can change the default snooze time from the Options dialog box.

   Show alarm procedure ()

   Show the alarm’s specific procedure, if one is defined by the administrator. Alarm procedures are simple to create and can take the form of HTML pages or a web application developed by the end user.

   Forward alarm ()

   Forward the alarm to another user in the system. Before forwarding the alarm, you must select a user, and you can also type a message.

   Edit context ()

   Add or modify the alarm annotation.

   NOTE: All alarm actions are logged in the activity trail.