Situations Overview

You may receive Notifications about Situation assignments if notifications are enabled for assignments.

The Open Situations view displays all open Situations that are currently unresolved.

The My Situations view displays Situations that are assigned to you.

You can find out more about each Situation and open its Situation Room by clicking the colored pill containing the Situation ID. For more information see Situation Rooms and Work with Situations.

You can choose how frequently you want your Situations View to refresh. Click Real Time and select one of the following frequencies in the drop-down list. The refresh rate displays. Moogsoft Onprem remembers the refresh rate that you selected when you log in again.

Use the View menu to show Situation row striping or to select which columns are shown:

Select Situation View Striping to show rows in the color of their severity:

Configure which Situation columns are displayed by clicking to select them in the View menu. Available columns include:

You can click the checkboxes in the far left column to select each Situation individually:

To select multiple Situations at once, hold down Shift and then click the checkboxes of the Situations you want to select. If you select one Situation using this method and then click another Situation further down the list, all Situations between the two are selected.

Another method is to left-click and drag down to highlight the Situations you want to select and then right-click to select them and open the Tools Menu (also known as the Right-Click menu).

Click the Select All checkbox in the top left corner to select all Situations. If the checkbox is grayed out, scroll down to load all Situations and activate it.

You can change the width of each column by hovering your mouse cursor over the column order and clicking and dragging it to increase or decrease the width.

To change the order of the columns, click the column title cell of the column you want to move and drag it to a new location in the top row. Two green arrows will indicate if the move is valid:

You can also configure the order in which the Situations are shown by clicking the column title cell to rearrange them in ascending or descending alphabetical or numerical order. For example, click the 'Severity' column to arrange the Situations in ascending or descending order of severity.

Use the Tools menu or right-click menu to perform any other action on one or more selected Situations.

This can be accessed by clicking Tools or by right-clicking on the Situation list.

Select a Situation or multiple Situations by clicking in the checkboxes in the far left column, or use the Select All checkbox. Then click Tools and select one of the following actions:

There are six default industry-standard severity levels, which are shown and described below:

The color severity of the My Situations and Open Situations icons on the Side Menu indicates the highest severity level of the alerts within each list. A Situation's severity will be determined by its alert with the highest severity level. If this alert is cleared then the Situation adopts the severity level of the alert with the next highest severity.

The Situation details window allows you to explore the forensic details of a Situation.

The individual column names and their descriptions are listed in the table below:

You can copy the Situation details by clicking and dragging across the text to highlight it. You can use Ctrl+C (⌘+c on Mac) to copy the text. This can be pasted in an external editor or tool as required.

You can access Custom info to view custom fields for the Situation. It displays in a page tree format. Click the blue drop-down arrows to view the property details.

Administrators can add custom info to alerts during system configuration. You can add custom info using the Situation Client Tool using a JSON snippet under the 'Merge Custom Info' field.