This page displays the tickets created from incidents—alarms and alerts. These tickets include information such as:
Time created
Type of incident
Subject of the ticket
Impact level of the ticket
Source IP of incident
Destination IP
Ticket Status
Closure Code
You can find even more information by clicking the ticket to open it.
To find the ticket you're looking for, you can use the filter tools to create criteria that filter out the tickets you don't want to see. You can create criteria based on:
Dates
Keywords
Type: Alerts, alarms, or both
Status: Open, on hold, closed, or all
Impact: High, medium, low, or all
You can combine some or all of these criteria, and they will all be applied to focus the tickets list.
Filters are active until you remove them, even if you navigate to another page. When you return to the dashboard, the filter will still be in place.
Raw Events
The Raw Event field shows information on the event that triggered the incident, in an unprocessed state. This data will be in its raw format or protocol, whether that is xml, json, or syslog.
To filter the list of tickets
In Barracuda XDR Dashboard, click Intelligence > Alarms & Alerts.
In the From box, select a date.
In the To box, select a date
Do any of the following:
In the Type area, click All, Alerts, or Alarms.
In the Status area, click All, Open, On Hold, or Closed.
In the Impact area, click All, High, Medium, or Low.
Click Search.