{"id":3713,"date":"2021-03-25T14:09:19","date_gmt":"2021-03-25T14:09:19","guid":{"rendered":"https:\/\/codimatech.com\/?post_type=docs&#038;p=3713"},"modified":"2021-06-16T10:01:57","modified_gmt":"2021-06-16T10:01:57","slug":"how-to-use-alertticketing","status":"publish","type":"docs","link":"https:\/\/codimatech.com\/eu\/docs\/how-to-use-alertticketing\/","title":{"rendered":"How to use Alerts Ticketing"},"content":{"rendered":"<h1 class=\"wp-block-heading\"><strong>ALERTS TICKETING Feature<\/strong><\/h1>\n\n\n\n<p>Alerts and Ticketing is a from the ground up, Integrated system (not a bolted-on package with a different GUI). It pulls together Alerts from Toolbox Monitoring and External Alerts such as Syslog, and then Classifies and Presents them throughout the system including in Toolbox Live Maps (including Probes).<\/p>\n\n\n\n<p><br>Tickets can be generated Automatically or added Manually and sent to general or specialised Teams. The system automatically Tracks and chases up Tickets by talking to engineer and supervisor pools, using an elegant but world class setup. A diagram illustrates Polling operation, see next page.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What Alert System does<\/strong><\/h2>\n\n\n\n<p>The system is designed to Analyse and Classify Alerts and work with other (SIEM) Alert Management Systems to Display Alerts in the Distributed Toolbox GUI especially in the Live Maps.<\/p>\n\n\n\n<p>Alerts are created by Monitors within Toolbox and Externally by network devices as SNMP TRAPs and Syslog messages. These sources are combined in Alerts processing and viewed in the raw Alert form in the Review Alerts top panel. The Alerts are broken down into many categories (user programmable) and displayed in Standard and (optionally) in User Created Dashboards.<\/p>\n\n\n\n<p>Alerts can be modified, collected together using Triage (kills alert floods) and can be used to create Job Tickets. First Alerts must be Classified with a Filter Matcher using the Alert Filter system, this saves time later as Alert Classifications (filters) can be applied in Map Animations too.<\/p>\n\n\n\n<p>Incoming Alerts may be modified say to change priority or change the message to something easy to understand. They can then be re-transmitted as TRAPS or Syslog or just processed internally.<\/p>\n\n\n\n<p>The Job Ticketing system works with Triage and is a powerful but simple Job Ticket Allocation system with 3 Ticket Priorities. A Pool of Engineers is created by the user to address specific functions such as Server maintenance or geographical areas. A single interface specifies actions per Ticket Priority including a full set of Reports to Track Engineers and Ticket Progress.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Alert Sources Diagram<\/strong><\/h2>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh4.googleusercontent.com\/dGj6yYZaBOalfz5rKlgZO3lxR_OeFAs8KgvdUjANVRUr1xaO6OFw9bwz4oB52Qp5U-ZTWMjB4jqUNpkXj91-bc_g5le9kBWt8GNNO5Aa-DDZh9DTp0fYNHi7eqG5Mv5ArsmOYZ8\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/word%20diag%20Alert%20Sources.bmp\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Alert Ticketing Overview Display<\/strong><\/h2>\n\n\n\n<p>A quick dismiss Alerts mechanism can be used if the full Alerts Triage and Ticketing system is not required.&nbsp;<\/p>\n\n\n\n<p>An example of the Alerts GUI with a list of alerts&nbsp; below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh4.googleusercontent.com\/bYdv3OaYDUjtLlERQR0xspodJk4BTUH8JJN9M0dSuH0ib3JjV4T0450x9GlpLN2l-LtbYKiy9do3_E0xddyf_RSvSWm6d43ERfLVpr49CJrRdQWEfrURCfr06yCGxtG48hBgzGQ\" alt=\"alerts ticket new sys.bmp\"\/><\/figure>\n\n\n\n<p>New Alerts (Non Triaged) &#8211; Tick Rows then Button to Dismiss Alerts, see below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh4.googleusercontent.com\/21GuJHZ6yQFv45IUr2n6_hE34kB3clHKv9iOhWI94Ow2mNrAZRANjBGAycICFAx_HNfLSOQ61USgPrRj5G02d4oyhavCc3f1rQzdAUfplqGSLJggWy6qtUReWamE1H4qGU9ggQs\" alt=\"\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Simple Alerts Dismiss or the Full Triage System?<\/strong><\/h2>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Alert Operation<\/strong><\/h2>\n\n\n\n<p>Processing Incoming New Alerts can be<\/p>\n\n\n\n<ol><li>ticked in the New Alerts display to Dismiss them<\/li><\/ol>\n\n\n\n<p>or 2) be intelligently processed by the Alert Triage System.<\/p>\n\n\n\n<p><strong>1)<\/strong> <strong>Simple New Alerts Dismissal Process<\/strong><\/p>\n\n\n\n<ul><li><strong>+ It is simple to use.<\/strong><\/li><li>+ No setup required.<\/li><li>&#8211; All Alerts have to be manually dismissed.<\/li><li>&#8211; Cannot create tickets automatically.<\/li><li>&#8211; Cannot automatically suppress alert floods.<\/li><\/ul>\n\n\n\n<p><strong>2) Triage New Alerts Process<\/strong><\/p>\n\n\n\n<ul><li>+ Automatically suppresses alert floods by converting them to a ticket (the Alerts are linked to the Ticket for later drill down).<\/li><li>+ Creates Tickets to allocate engineer resources and track fix processing.<\/li><li>+ Extensive reports to analyse alerts based on Triage Classification.<\/li><li>&#8211; Requires setup of engineer\u2019s pool, email, Alert Tickets and Triage Rules.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Ticketing Full Status Tracking<\/strong><\/h2>\n\n\n\n<p>This is a very major upgrade that allows full tracking and also interaction with both Engineers and tickets \u2013 see except from Help System below: &#8211;<\/p>\n\n\n\n<p>The right-side Window contains the Ticket Summary Grid which gives a live update of Ticket Status: &#8211;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/-coACZorXMKTyFcLrWvZqrzdfQVaLCXzMQ8fFOiSAtGhbwcm9QJCRLiVvICLO0geflT99ccFE0Y1rnkNa6hemA6GSxsjnLj4ygM0Z4Orw4hxU-YaIu8qTOvn4VhIQJs9zrlIpNE\" alt=\"http:\/\/localhost:51957\/Codima\/MyImages\/Help%20Images\/tickets%20view.bmp\"\/><\/figure>\n\n\n\n<p>On clicking on a Ticket Row the Ticket Summary appears as below: &#8211;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/0EtNE6XGT2mAh3x8cyLJdWUSQCsBmo5I1rRnTgUTOJuWc8wqgkYd1QBvuBDwW7SE8TUj9Se0KF_nJohCzWS9mHgvI8EIOd7NxNmE5QOL0lsYqd3xOv0uNmmkz6wLCWgHeSAaHEw\" alt=\"http:\/\/localhost:51957\/Codima\/MyImages\/Help%20Images\/ticket%20summary%203.bmp\"\/><\/figure>\n\n\n\n<p>Here it is possible to Cancel the Ticket immediately, Request an Update from the assigned engineer, or Re-Assign the Ticket to another Engineer.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How to Use Alerts and Ticketing<\/strong><\/h2>\n\n\n\n<p>Alerts of all kinds are initially displayed in the Alerts Tab top panel grid.<\/p>\n\n\n\n<p>They can be simply Dismissed or use the automated dismissal using the Triage System by creating a Job Ticket.<\/p>\n\n\n\n<p>However, if there is a&nbsp;<strong>Triage Rule<\/strong>&nbsp;that matches any incoming Alert then it will be automatically acknowledged and be removed from the top panel grid. The matching Alerts are retained in the system and attached to the matching Triage Rule which are viewable in Triage Analysis Grid Reports.<\/p>\n\n\n\n<p>Key to using the Triage System is to setup<strong>&nbsp;Alert Filter&nbsp;<\/strong>matcher(s) as these are used to Trigger Triage Rule Matches.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Using the Alert Tabbed Grid<\/strong><\/h2>\n\n\n\n<p>The Grid shows New Alerts: that can be Dismissed as explained under&nbsp;<strong>Using Alerts and Simple Alert Dismissal<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/ypCxBurkvgH0OXYrHhsm2-UFrfqxehxE3lEQ1iL_2ljg98s0eP7vcPEUPyEPq9ruVDXxi8CSviMn1ajHtyoLIidABnjVU5oCyq5OTxzO4fIpud6WvdLOC_HNP7JcsUioof9HsY0\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/new%20alerts%20dismiss.bmp\"\/><\/figure>\n\n\n\n<p><strong>Ticketed Alerts&nbsp;<\/strong>are Alerts that have been Successfully Triaged under the Triage Rule listed in the Status Column &#8211; in this case Alerts have been Ticketed using the&nbsp;<strong>Slow Ping Time&nbsp;<\/strong>Triage rule.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/KcmkCYhB-lOivWu4rLVQ9_LPNdG2NDXwPFhonLbmMKNfd6RNZGwOZfNMcWwWmqvkjBKNkTuMuasZG6iGVHF_XvpcKWoZArBQPyIXro9XbCXL8r_9V2Xb446WtzSfyS3zhBsu8-w\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/ticketed%20alerts.bmp\"\/><\/figure>\n\n\n\n<p>The&nbsp;<strong>All Alerts&nbsp;<\/strong>tab shows all Alerts including Manually Dismissed and Triage Dismissed Alerts. The list can be searched\/filtered and sorted using the standard Grid features. The Suppressed Alerts refer to Alerts being auto suppressed by the Triage System.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/Q7uyNEJwGUH6HkDgWOG3fyNRXLVZZvn7l6o6ccjqcbkHMsI1CIu70ZeFNRuE6VIHHnSXwf_lDIwH26wBS0AB0THpk1oezQF33402RKaTWVX5owCUNghbJIrdXikyjUs_ZRz4Mto\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/All%20Alerts.bmp\"\/><\/figure>\n\n\n\n<p>The&nbsp;<strong>Dismissed Alerts<\/strong>&nbsp;tab can be used to view Alerts that have been Manually Dismissed.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/D7VxkPApEBfFZxyuvV3teYCknUUcKyPLvV88hgj6zXRsgIdsg3PvTh6UTXh_bpSryUxdjYhP-qEU7Or8uLlthU6eTehNwfS18O_o1Lyndbgfw4bFE5Stj4FKMpND_NBNbg9wtwk\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/dismissed%20alerts.bmp\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Retrieving Windows Alerts<\/strong><\/h2>\n\n\n\n<p>Toolbox can talk to Windows boxes using WMI to collect Events from their Windows NT Logs and then convert them to Toolbox Alert Format. They are then processed as normal in Toolbox that means they can use&nbsp;<strong>Alert Filters<\/strong> to modify the alerts, create Tickets or send out as SYSLOG or SNMP Traps for example.<\/p>\n\n\n\n<p>The Windows Alert processing is setup by clicking on the Setup Windows Logging button as in the picture below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/mEP9Tf5XdTH40eucB7QzSJCBoV4Ve8TQXsHmA3FrFge-al7v0APi1CE3WvCg338MrEmq2XmC0NW-gByn8Gvu_9PCQ4jz4kS5cLslmfcfDIZ0-oK909Tw9EnofF98_2A0Vn8E3K0\" alt=\"2020 enable windows event track.bmp\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/docs.google.com\/drawings\/u\/0\/d\/scDfHZcXYDG00g71jlXo6ww\/image?w=33&amp;h=33&amp;rev=1&amp;ac=1&amp;parent=1DMVXnLDTTAi1BJUUyjeXBDU2Zcnt9wVD\" alt=\"\"\/><\/figure>\n\n\n\n<p>The following Dialog appears. Select which Windows Logs and what Priorities of Alerts&nbsp;you want to retrieve from the Windows System.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/F5vEQhJKPc5JSfCFHsjHYcnspBkaKdnke5M7TLBEqedlHG6wuE1Cgd-IgOI2A-LVK5SfzowQGoafapsdWCzyVFle7OdX-9MTMaVk-FqX8w5SyiHPb_6lsTqpHVI7GFbzcl5M8xM\" alt=\"2020 dlg event log track.bmp\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/docs.google.com\/drawings\/u\/0\/d\/ssmUoWBr3hacEj0Hy6Yw5KQ\/image?w=33&amp;h=33&amp;rev=1&amp;ac=1&amp;parent=1DMVXnLDTTAi1BJUUyjeXBDU2Zcnt9wVD\" alt=\"\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Using Alerts and Simple Alert Dismissal<\/strong><\/h2>\n\n\n\n<p>This Panel shows the Alerts under several classifications that show what is happening both for the Simple Dismiss Alerts system or the Triage System Results.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/ypCxBurkvgH0OXYrHhsm2-UFrfqxehxE3lEQ1iL_2ljg98s0eP7vcPEUPyEPq9ruVDXxi8CSviMn1ajHtyoLIidABnjVU5oCyq5OTxzO4fIpud6WvdLOC_HNP7JcsUioof9HsY0\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/new%20alerts%20dismiss.bmp\"\/><\/figure>\n\n\n\n<p>Using the Simple Manual Alerts Dismiss system click on the tick boxes on the Grid Rows to select the Alerts, then click on the&nbsp;<strong>Dismiss Alerts<\/strong>&nbsp;button. A popup will appear, as below:-<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/aTbm9ti23vd2euq8pHZqVXF4uM6hmCoJTy9h-OOFPuvVViVgNayfOchXs00An-xZMAkTw1AjQ6ULcLT22ztR3Vx3FasPvKBb61KTm0Q2Z08iDO5Um2oKVwggJYi9MyqikCN1Rd4\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/dissmis%20dlg.bmp\"\/><\/figure>\n\n\n\n<p>Clicking on the&nbsp;<strong>Dismiss Alerts<\/strong>&nbsp;button in the dialog will move the Alert to the Dismissed Alerts tab and they will no longer be Active in Toolbox e.g. in the Maps or Diagnose.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>A Diagram of the Ticketing Process<\/strong><\/h2>\n\n\n\n<p>Tickets can be Created Automatically by the Triage Engine or Added Manually in the Toolbox Web GUI.<\/p>\n\n\n\n<p>Depending on the Group Assigned by the Triage Rule or the Manual Ticket Dialogue box, then the Ticket is assigned to a particular Group of Engineers. New Tickets are assigned to Engineers by Email.<\/p>\n\n\n\n<p>The Supervisor, if Setup, is kept informed of Ticket Assignments and Failure to Respond by Email.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh4.googleusercontent.com\/VP4qniHJ2PSyqXqabdqETQROoxI71C53rQg2xL6tyrAviXRzy7AmUcDYkP-F--Jk89VSHSSMRJri4V_9hUUA6Qsw9IGjFaDdBJUHMs73I1hY7sXe12EbeX2-TAhpEGXLRT4S1pI\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/word%20Ticketting%20Operation.bmp\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Communicating with Engineers by Email<\/strong><\/h2>\n\n\n\n<p>Below is the Action of the Toolbox Ticketing System on Creation of a New Ticket. First the System looks for an Engineer that is Free and in the same Engineer Group as specified in the Ticket.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh4.googleusercontent.com\/oKCGUJcSh0USumQQgc2NsFt9Lxqhq_GRM1J8I4CNjzUtsDMk0yBfV2OnT5pRDLOwXu_NHzMSPGuM5pVmrVO9UBVeOJiUW3-xxfCt5KYj2yO7AIJS90RpIfvTqIgPm3XMVluY7Ck\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/word%20ticket%20flows.bmp\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>The eMail *COMMAND*s between Toolbox &lt;-&gt; Engineer<\/strong><\/h2>\n\n\n\n<p>&nbsp;A Ticket is assigned to an Engineer in a format as below:<\/p>\n\n\n\n<p>&lt;&lt;&lt;You have been assigned this Ticket &#8211; Reply *ACCEPT* or *DECLINE*<\/p>\n\n\n\n<p>*?* for command help&gt;&gt;&gt;<\/p>\n\n\n\n<p>Add Comments after the REPLY CODE (*&#8230;.*) terminated by **&nbsp;<\/p>\n\n\n\n<p>Priority Expedited &#8211; Ticket Reference #100103,<\/p>\n\n\n\n<p>Created 2018-06-13 11:33:16, As Slow Ping Time<\/p>\n\n\n\n<p>Device &#8211;&nbsp;&nbsp;<a href=\"http:\/\/www.worldtimeserver.com\/\">http:\/\/www.worldtimeserver.com\/&nbsp;<\/a>[<a href=\"http:\/\/www.worldtimeserver.com\/\">http:\/\/www.worldtimeserver.com\/<\/a>]&nbsp; Global&nbsp; web site&nbsp; no vendor&nbsp; &#8211; Location USA&nbsp;<\/p>\n\n\n\n<p>Site &#8211; Local<\/p>\n\n\n\n<p>(Ticket Assignment Summary &#8211; Alarm From DEV 1 System Monitor Pinger &#8211; Alarm 117ms&#8221; Alert &#8220;Low Value Test&#8221;&nbsp; Regarding&nbsp;&nbsp;<a href=\"http:\/\/www.worldtimeserver.com\/\">http:\/\/www.worldtimeserver.com\/&nbsp;<\/a>[<a href=\"http:\/\/www.worldtimeserver.com\/\">http:\/\/www.worldtimeserver.com\/<\/a>]&nbsp; Global&nbsp; web site&nbsp; no vendor&nbsp; Location USA<\/p>\n\n\n\n<p>Pinger QoS&gt;Average Ping Time 130 ms Above Limit 117 ms&nbsp; )<\/p>\n\n\n\n<p>The Engineer is invited to Accept the ticket by replying with *ACCEPT* usually followed by a Comment such as &#8220;will investigate now**&#8221;. The ** is used to terminate the Engineer comment&nbsp;(if it is omitted the rest of the email will be logged by the system). On the Toolbox System reading the reply, it will send out a confirmation to the Engineer and the system will update status on the Ticket and the Engineer.<\/p>\n\n\n\n<p>&#8220;*ACCEPT*&#8221; I will accept responsibility for this ticket. Ticket now registered to this Engineer.<\/p>\n\n\n\n<p>&#8220;*DECLINE*&#8221; I cannot accept this ticket.&nbsp;<br>&#8220;*REASSIGN*&#8221; Although I accepted this Ticket I now need someone else to deal with it. The Ticket is advertised to all Engineers in Group<\/p>\n\n\n\n<p>&#8220;*UPDATE*&#8221; Here is a Status Update, Status Updates may be Requested by the Supervisor too.<\/p>\n\n\n\n<p>&#8220;*COMPLETED*&#8221; I have successfully completed the Ticket. The Ticket is now marked as Closed Successfully.<br>&#8220;*NOSOLUTION*&#8221; I have not been able to fix the problem and have marked as closed Unsuccessfully.<\/p>\n\n\n\n<p>These are Status Message sent by the Engineer to Update the Supervisor &#8211; they do not impact existing Ticket Assignments.<br>&#8220;*BUSY*&#8221; I cannot Accept more Tickets, until updated by an AVAILABLE message to the Toolbox System.<br>&#8220;*AVAILABLE*&#8221; I can now accept new Tickets<br>&#8220;*SICK*&#8221; &#8211; reporting in Ill<br>&#8220;*HOLIDAY*&#8221;, &#8211; reporting in On Holiday<\/p>\n\n\n\n<p><br>&#8220;*HELP*&#8221; or&nbsp;&#8220;*?*&#8221; &#8211; Request for a full list of Commands and their meaning.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Using the Ticket Summary Dialog<\/strong><\/h2>\n\n\n\n<p>The righthand side Window contains the Ticket Summary Grid which give a live update of Ticket Status:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/-coACZorXMKTyFcLrWvZqrzdfQVaLCXzMQ8fFOiSAtGhbwcm9QJCRLiVvICLO0geflT99ccFE0Y1rnkNa6hemA6GSxsjnLj4ygM0Z4Orw4hxU-YaIu8qTOvn4VhIQJs9zrlIpNE\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/tickets%20view.bmp\"\/><\/figure>\n\n\n\n<p>On clicking on a Ticket Row the Ticket Summary appears as below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/0EtNE6XGT2mAh3x8cyLJdWUSQCsBmo5I1rRnTgUTOJuWc8wqgkYd1QBvuBDwW7SE8TUj9Se0KF_nJohCzWS9mHgvI8EIOd7NxNmE5QOL0lsYqd3xOv0uNmmkz6wLCWgHeSAaHEw\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/ticket%20summary%203.bmp\"\/><\/figure>\n\n\n\n<p>Here it is possible to Cancel the Ticket immediately, Request an Update from the assigned engineer, or Re-Assign the Ticket to another Engineer.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>The Ticketing Panel Description<\/strong><\/h2>\n\n\n\n<p>This Panel gives access to several Ticketing features:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/GPeokzH2vwJYZMDrpkO2L3lhBGFpwntP0Goa_op4sdBkDmZ3YFzAVHhbxNciOIZKYYogDrX-y6I7g55WiFUpiUPQg__Xg_bShIbotwlLrWDjuxMTG6WDS9QXHKyn1g5RbPLsNNc\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/panel%20tickets.bmp\"\/><\/figure>\n\n\n\n<p>A New Ticket can be added directly to the Ticketing System&nbsp;by the Operator without going through the Alerts Triage System by clicking on the&nbsp;<strong>Add Ticket<\/strong>&nbsp;Button, as below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/iufhX0sz3cwwBpyjVMg6goWMQ1Of28QXEepBLyPEsN0Gueebt17mFFUKMmJHuZTjUipxnBKgPvdlnZxo2XCUbey7DHdXoMU-YfIIcZ00_Wrfd19P8TMkFZ5BU-LE261YVZ0zcno\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/add%20ticket%20DLG.bmp\"\/><\/figure>\n\n\n\n<p>The Status of all Engineers regarding Ticket Progress and a further drill down to individual Ticket Events is available, as below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/6-NzaSm-U2RwEJ5SSam-kKI4UBxDAiB2qJoSqKRe40L7txnUfOBVchlss3n5wf62gB7wFg2QYFqV4iqAM4NkmurOTd1TgJdPiZyn48bdxgOe2Fwq6Jh65UCisqJ4Fl9p5Gos9K8\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/engineers%20dlg.bmp\"\/><\/figure>\n\n\n\n<p>Clicking on a Grid Row will bring up an analysis of events for that Engineer as below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/K7cSf38wgZZb_OyqlEu6q9D64T9Ob9MObW-2bN5NKAneyvehMr6rHET4MkaAPP6fSSDAvbGSSysPt8Qw9ufMN9JUUpfTQxrlEVhTRQrRxjGgRyHaXT0ti8Ejp5AkuL4xL6YEs18\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/engineer%20events.bmp\"\/><\/figure>\n\n\n\n<p>Clicking on a Grid Row for a Supervisor, also brings up an Event List for the Supervisor:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/3Zs7COARcTkbMampD-qDdIND2C9Rc6Pk6PCZwVsCOqQ82PDvAqceRFDCvW4IicCA8FK1VeOOdx_JWkkZKvhdYRV-5TNk9uWUEc125keSMEBJ3YuR5VyeZPnFadW3WscYlJbbmeI\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/supervisor%20events%20list.bmp\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Using Alert Filters<\/strong><\/h2>\n\n\n\n<p>This panel allows the user to define very broadly based Alert Filters like simple&nbsp;Alert Priority or very detailed such as a complex Alert Text match with multiple match components.<\/p>\n\n\n\n<p>They are used primarily in Triage of Alerts but can also be used to Filter Alert Animations in the Topology Maps of the Toolbox product.<\/p>\n\n\n\n<p><strong>Toolbox Alert Groups<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/UOWxRHxHmaeMsLZIpI26-_IL7Za86YzYv6Wq4VJlHQatIfPbchdBt0lqeF6qQl0SuqyvMFZ921ftE-P7JjR3Bp53C41CChW6dv5XY6jwE1R41gKWCk3kl_D9Y9ongn4LN9xpT5E\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alerts%20add%20dlg%20group.bmp\"\/><\/figure>\n\n\n\n<p>This matcher matches Toolbox internal alert type Groups, it is added for completeness rather than a frontline feature. Groups can be seen in raw Alerts by switching on the Groups Grid Column to learn the Toolbox internal group names.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Setting up Alert Filters in Detail<\/strong><\/h2>\n\n\n\n<p>To&nbsp;<strong>Add a new Alert Filter,<\/strong>&nbsp;simply click on the button highlighted in yellow below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/yv3SvBgrPXnTDAL8ydVYkIlVben3-lRn2QPTbxLjhKqrxD0GXH77PtCNdY6irHQUpv1gY9TsJETe8B7NSTvZmW4KzrjVGDz2wJk0Y9so5ZpmGST887liZTnZbLRpDJPpeHyD4FU\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/allerts%20new%20filter%20buttonbmp.bmp\"\/><\/figure>\n\n\n\n<p>To&nbsp;<strong>Edit an existing Alert Filter<\/strong>&nbsp;double click on a Grid Row, as below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/saL87dXSvwJqHUULL4K8-HZDVpIL566mEYjV2wzs2MnZLwhl4FhxR-lmo5e0wjxTDoMNgXKtcWWXaPaeKq3UvQbcMDTEomimL2AFmR7ya4GW7LxY5gG4-q5K6Uqjm7_lBWYH7zo\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alert%20filter%20click%20row.bmp\"\/><\/figure>\n\n\n\n<p>To add or modify an Alert Filter the Alert Filter Dialog pop-up is used, as below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/7awFPR9RelWfu5pNh0ATQVC2j2OWuCJA5sNPmehBBZ094SRRZT4zCm0Ij-3CGmv4SnDHaEvnRu_38Sd0nvPG98mmHngt8zQ010-UDz18vDj2sSP1nGKe0KccNeOqxo5LBjl8RjA\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alerts%20ADD%20dlg.bmp\"\/><\/figure>\n\n\n\n<p>Although this pop-up has very many options, typically, only one or a few are actually required.<\/p>\n\n\n\n<p>The various options are now described one by one.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Filter Title, Class and Icon<\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/gff3jzbRWyCx1ALlvl5giTNvu1YxH3t_kF3RVt-GIJ9qAkrrJ-MrOReezMmmVp_8lzw6cxT0aQbOz0LbTZ2OFUEUwWRvvUpjDPe6QYlRczzMnbpG-WG7AU2jVdQE5hvMRl2pk2c\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alert%20filters%20heading.bmp\"\/><\/figure>\n\n\n\n<p>Key for the filter is to enter a&nbsp;<strong>UNIQUE&nbsp;<\/strong>title. It is important that the Name needs to say what the filter Matches.<\/p>\n\n\n\n<p>An optional&nbsp;<strong>Class&nbsp;<\/strong>may also be added that is useful&nbsp;to categorise Filters like for example Security alert matching. Note:&nbsp;<strong>Class&nbsp;<\/strong>can be shown in the Alerts Grid by adding the Class Column by clicking on the Columns Icon at the bottom of the Grid.<\/p>\n\n\n\n<p>Additionally, an optional&nbsp;<strong>Icon&nbsp;<\/strong>may be added to the Filter Match. This is highly recommended to make Filters more graphical throughout the Toolbox System.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Match Alert Priority<\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/awfXiD5JCksXJwjWAHV5MWZrelTjM92t7tmILcdTNkN_IoGQGJNOM1vPpVbbXVh3Hu7ObK3d3CgXwuhNH6MRTMPpPCY3THNYDYHsanO8JAFEn2E6v4lGUWhnL3qdxVyo5turOeI\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alerts%20add%20dlg%20priority.bmp\"\/><\/figure>\n\n\n\n<p>The incoming Alert Priority can be matched by first selecting the Condition and then the Priority Level in two dropdown menus. Useful for matching high priority alerts probably combined with some Alert filter match property.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Match IP Address or a Toolbox Group<\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/Aqj-AjIZWwHhQ2083WN1h7qNwxToBJtJ-c4eNU6P0AiGRsOAmOnc_jLdolgfoKFzF268EB56anr3McCAoo1F4-7f_RTvlWoaExt6WIdqr49dsrx2dn9rIxXPAOp1YWFsF178dmQ\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alerts%20dlg%20match%20IP.bmp\"\/><\/figure>\n\n\n\n<p>This can be used to match a whole IP Address or a fragment of an IP address like &#8220;10.26.&#8221;, by selecting the IP Address&nbsp;<strong>Type:&nbsp;<\/strong>option.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/hPHi8J-RlwZYrgfxy319CWgVVC8AHczl-0AFqHeLbVQq2hOssNoHogCAlFsrleRy6NkQuTR6-Rr8XwOgGyXLlcRWOhM7Xe3ewfucIqoLTVP552p0xQKZEL6udIL7tPVclKhXVeQ\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alerts%20add%20dlg%20match%20group.bmp\"\/><\/figure>\n\n\n\n<p>By selecting a Group&nbsp;<strong>Type:&nbsp;<\/strong>option<strong>&nbsp;<\/strong>the filter will look for IP Addresses in the Specified Group IP Range(s). Note: Groups are setup under the Setting Tab-&gt;Groups Panel.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Match Unit\/Device Type<\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/6bRCU_lG0_8DxVwZr6X3dWDln1dZQzsvcD28r_jM7-FMQuZ6wVKP0D4NuQ3RdSAB3O-UX4E2W5jdvpsuqGeTm9kpkM-hZT0IzHb30iHZzCOzmeVO8HGf6u92GJ5PrLD1jYjwqn8\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alert%20match%20unit.bmp\"\/><\/figure>\n\n\n\n<p>This is used to match Device (Unit) types like&nbsp;<strong>Switch<\/strong>,&nbsp;<strong>Router<\/strong>,&nbsp;<strong>Server&nbsp;<\/strong>or other types. To match, say Layer 3 and also Layer 2 switches, match&nbsp;<strong>*Switch<\/strong>&nbsp;so the match begins with a wildcard&nbsp;<strong>*&nbsp;<\/strong>character (i.e. match&nbsp;<strong>L3 Switch<\/strong>&nbsp;and also&nbsp;<strong>Switch<\/strong>).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Match Message Text<\/h3>\n\n\n\n<p>This is probably the most important matcher as it matches the content of the message, like a&nbsp;<strong>Syslog Message <\/strong>content or an<strong>&nbsp;SNMP Trap<\/strong>&nbsp;content or&nbsp;<strong>Toolbox Generated Alert<\/strong>s like Threshold Breaches etc.<\/p>\n\n\n\n<p>The matcher makes full use of Wildcards like&nbsp;<strong>*<\/strong>&nbsp;and&nbsp;<strong>_<\/strong>&nbsp;&nbsp;&#8211; to wildcard multiple or single characters&nbsp;respectively.<\/p>\n\n\n\n<p>The matcher can have from 1 up to 4 individual matcher terms that can be ANDed or ORed together.<\/p>\n\n\n\n<p><strong>One Term<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/ewlkp9U9P90Q5Tjlg2u5DErrbr0ElxPuWHJJlSTdHCF2Vmd5rXARL4mzPUvFM5E1Y7zZH7twNBxvpx0eDVQFaKPRW2dLni0NtrT6w5oRW5wNbFpr4y8iYx_UYOA7uRU0uboT5WM\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alert%20match%201.bmp\"\/><\/figure>\n\n\n\n<p><strong>Two ORed Terms<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/pLDJfu4NvgLV7cBTRoBeKg0V4fEON07szalsATVN_r-9ciIu_maYC7lRmbiSa6AEtk_TpC7XS086IZB7F_z1iVKTf80qkwGgcrbXZiv4A5kYBgGCICGLXz0CZ2vK8A9Jr5Q03Mo\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alerts%20add%20dlg%20match%20mess.bmp\"\/><\/figure>\n\n\n\n<p><strong>Two Terms with a Not Match exclusion Term<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh4.googleusercontent.com\/3v4oeTQnJiqVaFDjhwBmYBlpIf8OwxUvihE1xLIAIH8DHG2J1pw7h2LqJDVjQM4pB8cuu0EiCY8Rkw-Yd0uanIOCQD8hjL7Zs4oh5bdCaHXZUorqjBjYFmhX5xiWyod-XYKa3t0\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alerts%20add%20dlg%20not%20match%20txt.bmp\"\/><\/figure>\n\n\n\n<p><strong>Three Terms ANDed match.<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/NgNirlnNblTD65hQ1qgNGxnRc8mnLVok-i6YL9pEnfh81fWhXy0ULlfGFHWACaYcyGyR31Ye8lY_dva51tzNLjk1QvdHrzd5P_QFUsKIYkPWu8c7r6MPQ9wY4P9VCoU66j2m4lQ\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alerts%20add%20dlg%20multi%20match%20text.bmp\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Using Triage to Job Ticket System<\/strong><\/h2>\n\n\n\n<p>The triage system depends on Alert Filters, see below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/Yl2x5zXLNjTlouI8E9jHQtdweqPNZtkeq4Xm7uKj5KaZEVYlEUbrAPgeaMbly07R74GQwTrU30Qcb39huyqV-b8B9Pwl9QSR4K_Au2i0_CrVoS4DM2bVqYziSMUeI7X1-1iBf0o\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/alert%20to%20blacklist%20filter.bmp\"\/><\/figure>\n\n\n\n<p>An Alert Filter has been created to Match Alerts coming from Toolbox Netflow Analytics, for example.<\/p>\n\n\n\n<p>The Triage references the Filter as below to start a Triage Action &#8211; in this case to create a Job Ticket.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/9vyMlqd8HxZAMeCtww_oaHhJJHII2r_QR67ZXAJthKyFNLHY4-P6UaeaHQcPDzH021YGGlkFePH3ix4w-s1aCQKJ2GL-7D18Ho61ok5XIaPbBM7kl0jTu_p4p75WGeh5k-4LcTw\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/triage%20job%20ticket.bmp\"\/><\/figure>\n\n\n\n<p>The&nbsp;<strong>Title&nbsp;<\/strong>is the Name of the Triage Rule which is set by the user and should describe the Triage Rule.<\/p>\n\n\n\n<p>Absolutely key is the&nbsp;<strong>Match Alert Filter<\/strong>, which is a dropdown list of all the&nbsp;<strong>Alert Filters<\/strong>&nbsp;that are in the System, setup under the&nbsp;<strong>Alert Filters<\/strong>&nbsp;panel.<\/p>\n\n\n\n<p>There can be several Alert filters which all can be associated with a Triage Rule and are processed by the Toolbox to create many Reports showing the drill downs of why the Triage was triggered. For instance, Alert Filters can be setup to Track Alerts for Pinger, TCP Port and Web Page Access which will all be associated with the Rule Trigger. Other Points of Failure such as intermediate Links and Devices can be Tracked with Alert Filters (e.g. based on SNMP or Pingers) such as dropped packets, slow response to add more information and analysis in the Triage Rule drill reports.<\/p>\n\n\n\n<p>The&nbsp;<strong>Match Actions<\/strong>&nbsp;for this Job Ticket Triage Rule specify which&nbsp;<strong>Support Team<\/strong>&nbsp;will be Assigned the Ticket. There are several standard Teams setup by Toolbox, but the user can add as many Support Teams as required.&nbsp;The&nbsp;<strong>Priority&nbsp;<\/strong>drop down selects&nbsp;<strong>Urgent<\/strong>,&nbsp;<strong>Expedited&nbsp;<\/strong>or&nbsp;<strong>Routine&nbsp;<\/strong>which influences directly how the Tickets are processed when assigning and progressing Tickets.&nbsp;<strong>Urgent&nbsp;<\/strong>Tickets will be chased more aggressively than&nbsp;<strong>Routine&nbsp;<\/strong>Tickets by the Toolbox Job Tracking system<\/p>\n\n\n\n<p>The Job Tickets are also shown in the Live Network Maps including from Remote Probes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong><\/strong><strong>Using Triage to Modify Alerts<\/strong><\/h2>\n\n\n\n<p>The Modify Alerts system works on individual Alerts that&nbsp;<strong>Match&nbsp;<\/strong>one or more&nbsp;<strong>Alert Filters.<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/YfnszTUkgJzrVFai8uGHUsp09r0zHVlvdMDB48whFB4Ri1ZQq4FfZRF57b2f-BSuV1KvqC3PEhA0FZpmxgzEB8UD6clyOyCuH62uD-G7SjH4Me6khZwgI939XlMcT7MSswtrsis\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/triage%20modify.bmp\"\/><\/figure>\n\n\n\n<p>The Modify Alert rule should be given a Unique descriptive&nbsp;<strong>Title<\/strong>.<\/p>\n\n\n\n<p>One or more<strong>&nbsp;Alerts Filters<\/strong>&nbsp;are selected to trigger this Modify type&nbsp;Triage Rule.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/GMf7YeZAghmwAt5xPKySeNcs-0xOI9CzYK1JS8rDY9CCF_gX4qMF-hfiuIB4tYQd021CgIcmWiPrqDhyX0jyunLpztJNr1J80KVC582zrKqRy_-xbour0e5RMvyNgTUhurSV0Es\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/triage%20alert%20priority.bmp\"\/><\/figure>\n\n\n\n<p>To optionally modify the Alert Priority, select a priority using the&nbsp;<strong>Priority<\/strong>: drop down control. This can be used to downgrade Alert priorities to reduce importance of matching Alerts,&nbsp;or alternatively,&nbsp;upgrade priorities on the specified Alert Filter matching Alerts.<\/p>\n\n\n\n<p>The Alert Group (<strong>Class<\/strong>) can be changed if a better or alternative grouping is known, based on Alert Filter matching.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/zZQiLwoJ4SV_n1OGsidPD-i8K5Rk8bla84em5G1pyY_x27z4boSCXTnpSgao7RrgatpTyF06PqkT6FX-nx_j_ece7TlXnJaQ-IzW8EKcB_-llskOy6nFeffqpI7IkkIKeX_-yEg\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/triage%20swap%20text.bmp\"\/><\/figure>\n\n\n\n<p>The Alert Text can be modified for matching Alerts to either Prepend Text, Replace Text or Append text to the Alert. Useful to explain cryptic Alerts or translate foreign&nbsp;language content to match the local site language.<\/p>\n\n\n\n<p><strong>Note<\/strong>: Alert Modification is done before any other Alert Processing is done.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Using Triage to Perform Direct Action<\/strong><\/h2>\n\n\n\n<p>This Triage type allows a range of actions to be performed such as converting Alerts into different Alert types like SNMP, Email or Syslog. Additionally, it can Trigger Execution of predefined Server Scripts. It&nbsp;can also be used to&nbsp;<strong>Copy&nbsp;<\/strong>Traps and Syslog for example to forward to another destination like a special management station.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/o0kcap20cKGqQU0vcse_3ljyMC-ZyTsbKqzt0Z976xl9Spx5jR64X_uj0TDBndSs8DaG7NItsO1fH0rQghuxbFzvWd8edtldOY_dQpW7bKsrcVG4KJrmydoLcJ4-e3V9DCXn1HM\" alt=\"http:\/\/localhost\/Codima\/MyImages\/Help%20Images\/triage%20actions.bmp\"\/><\/figure>\n\n\n\n<p>As with other Triage types the mechanism is driven by Matching a predefined Alert Filter.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Ticket Creation and Processing<\/strong><\/h2>\n\n\n\n<p>Tickets are created by the Alerts and Triage system and optionally manually by the Toolbox User.<\/p>\n\n\n\n<p>To process Tickets needs a list of Engineers and optionally Supervisor(s). When a new ticket is created, the system scans the list of Engineers looking for a free Engineer that Matches the&nbsp;Support Group&nbsp;of the Ticket. Support groups are predefined in Toolbox, but the user can add other groups, for instance for Geographical Regions.<\/p>\n\n\n\n<p>When a matching FREE engineer is found then system will email a Job Ticket to that Engineer. The Engineer can choose to *ACCEPT* or *DECLINE* that ticket in a reply email. The system depends on the Ticket Reference #999999 in the email Subject line (do not edit) to track responses from Engineers.<\/p>\n\n\n\n<p>Engineers can asynchronously report unforeseen circumstances like illness at any time to the system and likewise availability. Holidays and availability are tracked by the system based on submitted plans to Toolbox. See The eMail *COMMAND*s between Toolbox &lt;-&gt; Engineer.<\/p>\n\n\n\n<p>Tickets are processed following the rules set-up by the&nbsp;Edit Rules and Time-outs&nbsp;button. This specifies Time-outs (per Ticket Priority) and Procedures like when the Supervisor is updated by email on Assignments and procedure failures.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Full List of Engineer Requests<\/strong><\/h2>\n\n\n\n<p>These messages are automatically sent to the Engineer by the System.<\/p>\n\n\n\n<p>&#8220;You have been assigned this Ticket &#8211; Reply *ACCEPT* or *DECLINE*&#8221;<\/p>\n\n\n\n<p>&#8220;Job Ticket Offer to Any Engineer &#8211; Reply *ACCEPT* to take this Ticket&#8221;<\/p>\n\n\n\n<p>&#8220;The system has Acknowledged you have ACCEPTED this Ticket.\\n You can supply progress details using further *UPDATE* replies and *COMPLETED* when Ticket is completed successfully.\\n Reply *REASSIGN* to relinquish this Ticket.\\n Reply *NOSOLUTION* to indicate not fixable&#8221;<\/p>\n\n\n\n<p>&#8220;There was no Response from you to Ticket Assignment &#8211; Reply *ACCEPT* or *DECLINE*&#8221;<\/p>\n\n\n\n<p>&#8220;Can you update the system on Progress &#8211; Type *UPDATE* then details or *CLOSED* or *REASSIGN* or *NOSOLUTION*&#8221;&nbsp;&nbsp;<\/p>\n\n\n\n<p>&#8220;The system did not recognise your response &#8211; please respond with the Correct Reply Text &#8220;<\/p>\n\n\n\n<p>&#8220;The system did not recognise your last response &#8211; the Ticket details will be re-sent now (do not modify the Header Line)&#8221;<\/p>\n\n\n\n<p>&#8220;The system has Acknowledged you have DECLINED this Ticket.&#8221;<\/p>\n\n\n\n<p>&#8220;Supervisor &#8211; Ticket has been assigned to &#8220;<\/p>\n\n\n\n<p>&#8220;Supervisor &#8211; Ticket Assignment Timeout &#8211; Re-Assigning Ticket&#8221; &nbsp; &nbsp;<\/p>\n\n\n\n<p>&#8220;Ticket Completed Confirm&#8221;, &nbsp; &nbsp;&nbsp;<\/p>\n\n\n\n<p>&#8220;Ticket No Solution Confirm&#8221;, &nbsp; &nbsp;<\/p>\n\n\n\n<p>&#8220;UPDATE receipt confirm&#8221;, &nbsp; &nbsp;&nbsp;<\/p>\n\n\n\n<p>&#8220;The system has Acknowledged you have RE-ASSIGNED this Ticket.&#8221;, &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<\/p>\n\n\n\n<p>&#8220;The System Operator has Cancelled this Ticket.&#8221;, &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<\/p>\n\n\n\n<p>&#8220;The System Operator has Re-Assigned this Ticket.&#8221;,<\/p>\n\n\n\n<p>&#8220;Maximum Job Time Exceeded for this Ticket.&#8221;,<\/p>\n\n\n\n<p>&#8220;Help &#8211; *ACCEPT* offered ticket\\n*COMPLETED* ticket completed ok\\n*UPDATE* add details to ticket\\n*REASSIGN* re-allocate ticket to engineers\\n*NOSOLUTION* close not fixed\\n\\nTo Supervisor Status Update &#8211; *BUSY*, *AVAILABLE*, *SICK*, *HOLIDAY*&#8221;<\/p>","protected":false},"excerpt":{"rendered":"<p>ALERTS TICKETING Feature Alerts and Ticketing is a from the ground up, Integrated system (not a bolted-on package with a different GUI). It pulls together Alerts from Toolbox Monitoring and External Alerts such as Syslog, and then Classifies and Presents them throughout the system including in Toolbox Live Maps (including Probes). Tickets can be generated &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/codimatech.com\/eu\/docs\/how-to-use-alertticketing\/\"> <span class=\"screen-reader-text\">How to use Alerts Ticketing<\/span> Read More &raquo;<\/a><\/p>","protected":false},"author":4,"featured_media":0,"parent":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"site-sidebar-layout":"default","site-content-layout":"default","ast-global-header-display":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":""},"doc_category":[30],"doc_tag":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.10 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to use Alerts Ticketing - Codima Tech<\/title>\n<meta name=\"description\" content=\"Alerts Ticketing is a from the ground up, Integrated system. It pulls together Alerts from Toolbox Monitoring.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to use Alerts Ticketing - Codima Tech\" \/>\n<meta property=\"og:description\" content=\"Alerts Ticketing is a from the ground up, Integrated system. It pulls together Alerts from Toolbox Monitoring.\" \/>\n<meta property=\"og:url\" content=\"http:\/\/codimatech.com\/eu\/docs\/how-to-use-alertticketing\/\" \/>\n<meta property=\"og:site_name\" content=\"Codima Tech\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-16T10:01:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/lh4.googleusercontent.com\/dGj6yYZaBOalfz5rKlgZO3lxR_OeFAs8KgvdUjANVRUr1xaO6OFw9bwz4oB52Qp5U-ZTWMjB4jqUNpkXj91-bc_g5le9kBWt8GNNO5Aa-DDZh9DTp0fYNHi7eqG5Mv5ArsmOYZ8\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"http:\/\/codimatech.com\/zh\/docs\/how-to-use-alertticketing\/\",\"url\":\"http:\/\/codimatech.com\/zh\/docs\/how-to-use-alertticketing\/\",\"name\":\"How to use Alerts Ticketing - Codima Tech\",\"isPartOf\":{\"@id\":\"https:\/\/codimatech.com\/eu\/#website\"},\"datePublished\":\"2021-03-25T14:09:19+00:00\",\"dateModified\":\"2021-06-16T10:01:57+00:00\",\"description\":\"Alerts Ticketing is a from the ground up, Integrated system. It pulls together Alerts from Toolbox Monitoring.\",\"breadcrumb\":{\"@id\":\"http:\/\/codimatech.com\/zh\/docs\/how-to-use-alertticketing\/#breadcrumb\"},\"inLanguage\":\"eu-eu\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\/\/codimatech.com\/zh\/docs\/how-to-use-alertticketing\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"http:\/\/codimatech.com\/zh\/docs\/how-to-use-alertticketing\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/codimatech.com\/eu\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to use Alerts Ticketing\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/codimatech.com\/eu\/#website\",\"url\":\"https:\/\/codimatech.com\/eu\/\",\"name\":\"Codima Tech\",\"description\":\"Video Library\",\"publisher\":{\"@id\":\"https:\/\/codimatech.com\/eu\/#organization\"},\"inLanguage\":\"eu-eu\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/codimatech.com\/eu\/#organization\",\"name\":\"Codima Inc.\",\"url\":\"https:\/\/codimatech.com\/eu\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"eu-eu\",\"@id\":\"https:\/\/codimatech.com\/eu\/#\/schema\/logo\/image\/\",\"url\":\"http:\/\/codimatech.com\/wp-content\/uploads\/2020\/12\/codima-logo.png\",\"contentUrl\":\"http:\/\/codimatech.com\/wp-content\/uploads\/2020\/12\/codima-logo.png\",\"width\":378,\"height\":104,\"caption\":\"Codima Inc.\"},\"image\":{\"@id\":\"https:\/\/codimatech.com\/eu\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to use Alerts Ticketing - Codima Tech","description":"Alerts Ticketing is a from the ground up, Integrated system. It pulls together Alerts from Toolbox Monitoring.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"How to use Alerts Ticketing - Codima Tech","og_description":"Alerts Ticketing is a from the ground up, Integrated system. It pulls together Alerts from Toolbox Monitoring.","og_url":"http:\/\/codimatech.com\/eu\/docs\/how-to-use-alertticketing\/","og_site_name":"Codima Tech","article_modified_time":"2021-06-16T10:01:57+00:00","og_image":[{"url":"https:\/\/lh4.googleusercontent.com\/dGj6yYZaBOalfz5rKlgZO3lxR_OeFAs8KgvdUjANVRUr1xaO6OFw9bwz4oB52Qp5U-ZTWMjB4jqUNpkXj91-bc_g5le9kBWt8GNNO5Aa-DDZh9DTp0fYNHi7eqG5Mv5ArsmOYZ8"}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"http:\/\/codimatech.com\/zh\/docs\/how-to-use-alertticketing\/","url":"http:\/\/codimatech.com\/zh\/docs\/how-to-use-alertticketing\/","name":"How to use Alerts Ticketing - Codima Tech","isPartOf":{"@id":"https:\/\/codimatech.com\/eu\/#website"},"datePublished":"2021-03-25T14:09:19+00:00","dateModified":"2021-06-16T10:01:57+00:00","description":"Alerts Ticketing is a from the ground up, Integrated system. It pulls together Alerts from Toolbox Monitoring.","breadcrumb":{"@id":"http:\/\/codimatech.com\/zh\/docs\/how-to-use-alertticketing\/#breadcrumb"},"inLanguage":"eu-eu","potentialAction":[{"@type":"ReadAction","target":["http:\/\/codimatech.com\/zh\/docs\/how-to-use-alertticketing\/"]}]},{"@type":"BreadcrumbList","@id":"http:\/\/codimatech.com\/zh\/docs\/how-to-use-alertticketing\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/codimatech.com\/eu\/"},{"@type":"ListItem","position":2,"name":"How to use Alerts Ticketing"}]},{"@type":"WebSite","@id":"https:\/\/codimatech.com\/eu\/#website","url":"https:\/\/codimatech.com\/eu\/","name":"Codima Tech","description":"Video Library","publisher":{"@id":"https:\/\/codimatech.com\/eu\/#organization"},"inLanguage":"eu-eu"},{"@type":"Organization","@id":"https:\/\/codimatech.com\/eu\/#organization","name":"Codima Inc.","url":"https:\/\/codimatech.com\/eu\/","logo":{"@type":"ImageObject","inLanguage":"eu-eu","@id":"https:\/\/codimatech.com\/eu\/#\/schema\/logo\/image\/","url":"http:\/\/codimatech.com\/wp-content\/uploads\/2020\/12\/codima-logo.png","contentUrl":"http:\/\/codimatech.com\/wp-content\/uploads\/2020\/12\/codima-logo.png","width":378,"height":104,"caption":"Codima Inc."},"image":{"@id":"https:\/\/codimatech.com\/eu\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/codimatech.com\/eu\/wp-json\/wp\/v2\/docs\/3713"}],"collection":[{"href":"https:\/\/codimatech.com\/eu\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/codimatech.com\/eu\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/codimatech.com\/eu\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/codimatech.com\/eu\/wp-json\/wp\/v2\/comments?post=3713"}],"version-history":[{"count":3,"href":"https:\/\/codimatech.com\/eu\/wp-json\/wp\/v2\/docs\/3713\/revisions"}],"predecessor-version":[{"id":4619,"href":"https:\/\/codimatech.com\/eu\/wp-json\/wp\/v2\/docs\/3713\/revisions\/4619"}],"wp:attachment":[{"href":"https:\/\/codimatech.com\/eu\/wp-json\/wp\/v2\/media?parent=3713"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/codimatech.com\/eu\/wp-json\/wp\/v2\/doc_category?post=3713"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/codimatech.com\/eu\/wp-json\/wp\/v2\/doc_tag?post=3713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}