Investigating current and past alarms in Web Client - Security Center Mobile 4.1

Security Center Mobile User Guide for Web Client 4.1

series
Security Center Mobile 4.1
revised_modified
2017-05-24

You can search for and investigate current and past alarms, using the Alarm report task.

What you should know

For example, you might want to see which alarms were triggered during the last week, or since your last shift. You could search for major events that happened in your system, by only selecting critical alarms. You can see who acknowledged a specific alarm, and why. If there was a critical alarm that occurred and you must re-examine it, you can search for the alarm, and then review the attached video. If needed, you can also export the alarm video, and send it to law enforcement as evidence.

Procedure

  1. From the Web Client home page, click Alarm report.
  2. Set up the query filters for your report. Choose one or more of the following filters:
    Acknowledged by
    Users who acknowledged the alarm.
    Acknowledged on
    Alarm acknowledgement time range.
    Acknowledgement type
    Select one of the following acknowledgement type options:
    Alternate
    Alarm was acknowledged by a user using the alternate mode.
    Default
    Alarm was acknowledged by a user, or auto-acknowledged by the system.
    Forcibly
    An administrator forced the alarm to be acknowledged.
    Alarms
    Select the types of alarms you want to investigate. Alarms can be locally defined (), or imported from federated systems ().
    Source
    Source entity that triggered the alarm in the case of an event-to-action, or the user who triggered the alarm manually.
    State
    Current state of the alarm.
    Active
    Alarm is not yet acknowledged. Selecting an active alarm shows the alarm acknowledge buttons in the report pane.
    Acknowledged
    Alarm was acknowledged by a user, or auto-acknowledged by the system.
    Under investigation
    Alarm that is under investigation.
    Acknowledgement required
    Alarm with an acknowledgement condition that was cleared is ready to be acknowledged.
    Triggered on
    Alarm trigger time range.
    Triggering event
    Events used to trigger the alarm.
  3. Click Generate report.
    The alarms are listed in the report pane.
  4. To view the corresponding video of an alarm in a tile, do the following:
    1. Select an item in the report pane, and click View.
      NOTE: If the event is not associated with a camera, then the View button is not available.
      If the event is associated with more that one camera, the View dialog box opens.
    2. From the Select camera drop-down list, select which camera to view.
    3. Click theView () button.
      A Monitoring task opens in a new browser window, and playback video associated with the selected event is displayed in the canvas. You can control the video using widgets in the dashboard.