Administration Guide › Event Correlation and Incident Management › Incident Management Tasks

Incident Management Tasks

A CA Enterprise Log Manager incident is composed of one or more events, as identified and linked by a correlation rule. Each time a correlation rule detects an event or events that satisfy its criteria, CA Enterprise Log Manager creates an incident.

You can perform the following incident management tasks if you have the Administrator role:

• View the details of incidents created by the correlation rules in your environment.
• Filter the incident list, or set result conditions to locate particular incidents or types of incidents, or narrow your incident view.
• Apply notification destinations to existing incidents, controlling responses such as email notification.
• Export incident information.
• Schedule action alerts based on an incident.
• Merge existing incidents into one new incident.

Note: For detailed information on Incident Management tasks, see the CA Enterprise Log Manager Online Help.