Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Alarm Detail Monitor (All Views Except Service View)


Use the Alarm Detail monitor to sort alarms, view an alarm in depth, and to assign a disposition to an alarm.

By clicking the Details icon, you can access the Alarm Detail monitor from any of the four alarm monitors available on the main page in Fault mode (Severity, Category, Current, or State). It is also available from the Current Active Monitors available from the Summary tab in Monitor mode.

This topic describes:

Finding Specific Alarms

Use the Alarm Detail monitor to locate a specific alarm, research the events causing the alarm, and to assign a disposition to the alarm. When an alarm is highlighted in the sorting sequence, the events contributing to the alarm are listed in Event Details and the variable settings are shown in Event Attribute Detail.

To locate an alarm and to assign a disposition to the alarm:

  1. Sort the list using the Display list. Sorting choices vary depending on how you arrived here. View Sorting Alarms for details on sorting options.
  2. Review the sorted list. Each entry shows a minimum of one to a maximum of nine fields. These fields are described in Table 1.
  3. Examine the events and event attributes that contributed to sending the alarm. Events and event attributes are discussed in Reading Events and Investigating Event Attributes.

Table 1: Alarm Detail Fields



Shown in Detailed View by Default


The alarm name.



A system and sequentially-generated identification number.


Assigned To

If assigned to an individual, it shows the name of the person assigned; otherwise, it shows System to mark that the alarm is still unassigned.



The severity of the alarm. Severity levels are:

  • Critical—A critical condition exists; immediate action is necessary.

  • Major—A major error has occurred; escalate or notify as necessary.

  • Minor—A minor error has occurred; notify or monitor the condition.

  • Info—An informational message; no action is necessary.



Indicates if the alarm has been acknowledged.


Entity ID

The identification of the entity responsible for causing this alarm. The Entity ID is the key for correlation of events into an alarm. The Entity ID could be a MAC address of a radio or an IP address of the device.



The IP address of the device or network element that generated the alarm. The SNMP agent is located at the source IP. In most cases, the source IP is the IP address of the switch or controller.


Reporting Device

The hostname of the reporting device.


Creation Date

The date and time the alarm was first reported.


Last Updated

The date and time that the information for the alarm was last modified.


Updated By

Either the system or the last user who modified the alarm.


Sorting Alarms

Depending on the monitor you chose to access Alarm Detail, your sorting options change to reflect the summary monitor. The different sort options are listed in Table 2.

Table 2: Sort Options for Alarms

Alarms by Severity Sort

Alarms by Category Sort

Alarms by State and Current Active Alarms Sort











You can also use Searching Alarms in the Tasks pane to perform searches using multiple arguments. With multiple arguments, you can isolate a single alarm from a long alarm list.

Reading Events

When you select an alarm in Alarm Detail, the Event Detail table updates with information about the events that are associated with the alarm. Table 3 lists the fields in Event Detail.

Table 3: Event Detail Fields




The event name; also known as the SNMP trap name.


A system-generated, hexadecimal code that uniquely identifies the event.


If the event is an SNMP event, it is shown as a system-generated event.


The type of event, either fault or system alert.


The category of the event message. The category corresponds to the alarm categories shown in the Alarms by Category monitor and the Alarm Settings window. These categories are:

  • General

  • Chassis


The identification of the entity that is the cause of this event ; it is not necessarily the ID of the event that generated the event.


The identification of the entity that generated this event, for example, the switch IP or controller IP address.

Time Updated

The date and time of the last update to the event.

Investigating Event Attributes

The Event Attribute Detail window reflects the variables set during the event. In SNMP terminology, these attributes are known as variable bindings or varbinds. These attributes can provide key information about triggers. For example, if a fan fails, the attribute field could indicate the location of the fan in the chassis.

Changing the Alarm State

When an alarm is first reported, it is considered an active alarm. To change the alarm state, to assign the alarm to a person, or simply to record notes about the alarm, use the buttons on Alarm Details. These buttons are:

  • Acknowledge—Use this button to acknowledge or record that the alarm is known and is being addressed.

  • Clear—Use this button to clear or remove the alarm. The clear state says that the issue sending the alarm has been resolved and no long requires attention.

  • Annotate—Use this button to record actions taken to resolve the alarm.

  • Assign—Use this button to assign active or acknowledged alarms to staff.