Administration Guide › Event Correlation and Incident Management › Incident Management Tasks

Incident Management Tasks

A CA User Activity Reporting Module incident is composed of one or more events, as identified and linked by a correlation rule. Each time a correlation rule detects an event or events that satisfy its criteria, CA User Activity Reporting Module creates an incident.

You can perform the following incident management tasks if you have the Administrator role:

• View the details of incidents created by the correlation rules in your environment.
• Filter the incident list, or set result conditions to locate particular incidents or types of incidents, or narrow your incident view.
• Apply notification destinations to existing incidents, controlling responses such as email notification.
• Export incident information.
• Schedule action alerts based on an incident.
• Merge existing incidents into one new incident.

Note: For detailed information on Incident Management tasks, see the CA User Activity Reporting Module Online Help.