Moogsoft Docs

Analyze the Situation Timeline

The timeline offers a powerful graphical view displaying the progression of a Situation with a breakdown of its associated alerts in the order they occurred alongside key activity markers.

Use the timeline to analyze the Situation, see how it developed and determine the hotspots where there are higher volumes of more severe alerts.


Situation severity is determined by the highest severity of its alerts. In the example above, the Situation is critical because it contains Critical alerts, which is the highest severity.

Timeline Navigation

There are several components to the timeline tab which allow you to zoom in on a specific time, view Situation activity and display when alerts occurred.

Situation Activity

The Situation Activity panel will show activity markers at times where different things happened following the creation of the Situation.


The number indicates how many Situations activities occurred. Click on any of the activity markers for more details of what happened at that time.


In this example above, the five activities were: the creation of the Situation itself, it impacted the Ops Team, the Situation custom info was changed, 15 further Alerts were added to the Situation and then it was assigned to a User. The activity marker icons will differ depending on the type of activity that occurred.

Alerts and Event Details

The alerts are displayed in graphical form on the bottom of the Timeline tab, with each alert represented by a rectangular block the color of its severity.


You can view the details of the events within each alert by clicking each block. This opens the Event Details window. You can open the Alert Details window by clicking the Alert ID.


In this example, alert 94 contains events 200 and 201 which were detected by a Network Monitor.