Managing Incident Responses › Add an Incident Response

Add an Incident Response

To enable the management console to send a notification or launch an investigation in response to a network or server incident:

1. Add a network, server, or application incident response.
2. Add one or more actions to the incident response.
3. Assign the incident response to a particular network, server, or application.

Alternatively, edit the default network, server, and application incident response to add a responsive action. By default, the management console does not launch a notification or investigation in response to a network or server incident.

For the management console to launch a notification, both the incident Duration and Severity criteria must be met. Use the Duration and Severity criteria to launch an incident response for:

• Minor performance degradations that occur occasionally for short periods of time. Something might be happening that you should monitor.
• Major performance degradations that last for 1 hour or an Unavailable condition that lasts for 10 minutes. You should investigate these types of situations right away.

Follow these steps:

1. Click the Administration page.
2. Click Policies, Incident Responses in the Show Me menu.
3. Under the Show Me menu, click to add an action.

   Add Network Response

   Notifies the owner of the client networks for a remote site, or runs a trace route investigation.

   Add Server Response

   Notifies the owner of the server, or runs a server-based investigation, such as a packet capture, ping response time, or performance via SNMP investigation.

   Add Application Response

   Notifies the owner of the application, or runs an application connection time investigation.

4. Click Apply.

   You are ready to add an action to the incident response.

More information:

Managing Application Availability

Assign an Incident Response

Manage Monitoring Device Incidents