Event occurrence periods - Security Center 5.9

Security Center User Guide 5.9

series
Security Center 5.9
revised_modified
2020-08-19

Certain intrusion detection units and access control units can store events that occur while the units are disconnected from Security Center but still physically running. Occurrence periods indicate when these offline events occurred, and determine what happens with the events after the units reconnect to Security Center.

The occurrence period of an event is shown in the Occurrence period column in reports and in the Monitoring task. Events are treated differently in Security Center, based on whether its source entity is an intrusion detection unit or an access control unit.

The following table lists the different occurrence periods, and how they affect events:
Occurrence period How the event is treated in Security Center
Online
  • The event occurred while the unit was online.
  • The event is recorded in the database and is available for reporting.
  • The event appears in the Monitoring task.
  • The event can trigger actions through event-to-actions.
Grace period
  • The event is recorded in the database and is available for reporting.
  • The event appears in the Monitoring task.
  • The event can trigger actions through event-to-actions.
  • For intrusion detection units: The event occurred during the Grace period configured for the unit extension in Config Tool.
  • For access control units: The event occurred within 15 minutes before the unit came back online.
Offline alarm
  • The event is recorded in the database and is available for reporting.
  • The event does not appear in the Monitoring task, except for specific intrusion events.
  • The event can trigger the following actions through event-to-actions:
    • Trigger alarm
    • Add bookmark
  • For intrusion detection units: The event occurred between the Grace period and the Alarm grace period configured for the unit extension in Config Tool. The following events appear in the Monitoring task, and can trigger actions through event-to-actions:
    • Input alarm activated
    • Intrusion detection area alarm activated
    • Intrusion detection area duress
    • Intrusion detection unit tamper
  • For access control units: The event occurred within 72 hours before the unit came back online.
Offline
  • The event is recorded in the database and is available for reporting.
  • The event does not appear in the Monitoring task.
  • The event cannot trigger actions through event-to-actions.
  • For intrusion detection units: The event occurred between the Alarm grace period and the Persistence grace period configured for the unit extension in Config Tool.
  • For access control units: The event occurred more than 72 hours before the unit came back online.

Reasons why units can be offline

An access control or intrusion detection unit can be offline in Security Center for the following reasons:
  • The unit is rebooting.
  • The unit’s firmware is being upgraded.
  • The connection between the unit and the Access Manager or Intrusion Manager is lost.
  • The connection between the Access Manager or the Intrusion Manager and the Directory is lost. When this happens, the role disconnects from its units until the connection with the Directory is re-established.