Symantec 10521146 Administration Guide - Page 203

Monitoring 203 Managing incident and event data ■ Device Name Indicates the name of the device where the incident was detected. ■ Location Indicates the location of the device where the incident was detected. ■ State Indicates the condition of the incident, either Active or Closed. Incidents to which no new events have been added for a given amount of time are considered idle, and Symantec Network Security closes them. ■ Marked Indicates whether you marked the incident as viewed. ■ Node # Indicates the number of the software or appliance node that detected the incident. ■ Node Name Indicates the name of the software or appliance node that detected the incident. ■ Other Node Indicates the numbers of the software or appliance node that the #'s incident was cross-node correlated to, if any. Note: All users can select incident columns. See "User groups reference" on page 319 for more about permissions. See the following for related information: ■ See "About incident/event reports" on page 229. ■ See "Sorting column data" on page 192. Selecting event columns Not all events contain data in every category, so you may want to remove empty or irrelevant columns, or add others to customize the display. All users can modify the display of event information by selecting columns. To select event columns 1 In the Incidents tab, in the lower Events at Selected Incidents pane, click Columns. 2 In Table Column Chooser, do one of the following: ■ Click Select All to select all columns. ■ Click the individual columns you want to view. 3 Click OK to save and close.