Event Summary Configuration
The Event Summary Configuration
page, located under Tenant Configuration
, allows you to customize how events are displayed and interacted with in Alert Manager Enterprise (AME).
Event Expanded and Open Settings
Event Tab Order
Adjust the tab order for event details in the Tenant Configuration settings:
Requires an AME subscription.
Expanded View Settings
Enable or disable fields shown in the Expanded View:
- Tags
- Notable Fields: Choose between tooltip or key/value display.
Notable Fields in Expanded View
Add and order Notable Fields for the Expanded View using the Add
button:
Wildcards are supported.
Requires an AME subscription.
Event Fields in Expanded View
Add and order Event Fields for the Expanded View using the Add
dropdown, which lists all available fields:
Requires an AME subscription.
Event Table Configuration
Customize the fields displayed in the Event Table:
- Store multiple configurations as
Fieldsets
. - Add fields using the
Add
button.
Requires an AME subscription.
Event Actions
Configure actions available in the Event Summary to streamline event management. These are set under tenant configuration and include primary actions (directly visible) and secondary actions (accessed via the Actions
button). Default actions are listed below (see Working with Events for usage details).
Event Actions will be visible as follows:
Following Actions are set by default:
Primary Actions
These actions appear directly in the Event Summary:
- Update Assignee: Assign a user to the event.
- Update Status: Change the event’s status (e.g., to
Assigned
).
Secondary Actions
These actions are available after clicking the Actions
button:
- Update Tags: Modify event tags (e.g., add
PCI
). - Update Notifications: Adjust notification settings.
- Update Urgency: Change the event’s urgency level.
- Update Resolution: Set the event’s resolution (e.g.,
Resolved
). - Delete Event: Remove the event from AME.
- Copy Link: Copy a link to the event.
- Original Search: View the Splunk search that created the event.
Requires an AME subscription.