Events

A graphic at the top of this window shows the device and its network connections. Events that occur in the network for the selected device are recorded and displayed in this window. Table data is updated hourly. There is an Events tab and a Configuration Events tab above the table. Configuration events show only changes to the device configuration, either from inside a network policy, or at the device level.

Use the key-ahead search field to search for an event by description. Use the column picker to customize the categories displayed in the table. By default, Timestamp, Severity, Category, and Description columns are displayed. Optional columns include Host Name, Device MAC, and Client MAC. You can download table data as a .csv file.

Sort the table by the event category using the drop-down list. To control how the information is presented, select any of the column headings. For example, if you want to organize the content by host name, select the Host Name heading.

Each alarm or event log entry consists of the following elements:

• Type: Indicates if the row represents an alarm or an event.
• Timestamp: Indicates the time in the month/day and time-of-day format that the alarm or event occurred.
• Severity: Indicates the severity of the alarm or event. The following can be displayed: Critical, Major, Minor, Info, and Clear.
• Category: Specifies the issue category that triggered the alarm or event. The following categories are available state change, client connection down, client connection change, static route ping protection, and DHCP rogue MAC detection.
• Host Name: The host name of the configured device on which the event occurred.
• Device MAC: The MAC address of the device that reported the alarm or event.
• Client MAC: The MAC address of the client that reported the alarm or event.