All Events report
The All Events report gives you a window into past events, providing you with access to more of your xMatters data to support root cause analysis, address compliance requirements, and other important processes. Our extended data retention capabilities allow you to enjoy improved visibility into your xMatters data via the report.
Consolidating event reporting
To make it easier to access information about both current and historical events in your system, we're working to consolidate the All Events and Recent Events report into a single interface. This will involve bringing some existing features from the Recent Events report (such as the Timeline and Log reports) into the All Events report and updating the user interface and components of the All Events report to include the same data presentation.
A quick word about your data...
Prior to extending our data retention capabilities, the default storage limits were 30-days of runtime data and 60-days of archived data. When we began populating your historical data in October 2018, we maintained whatever information was available in your system at the time, so your initial experience with the All Events report will be unique to you and your system. Data that was purged before data retention was extended for your system is not available but, going forward, xMatters retains all of your event data, along with historical on-call and notification history. This means that the All Events report continues to grow in functionality and depth of presentable data, but also limits visibility to that data based on your pricing plan so you only pay for the data you need.
To allow for unknown factors such as clock drift and network lag, there is a 15-minute synchronization window between data collected by the current system and the contents of the extended data retention facility; in other words, what is displayed in the All Events report. If you're looking for information on currently live events, or events within the last 30 days, you might want to use the Recent Events report.
When you open the All Events report, you'll notice the event data displayed in a table:
The All Events report includes the following columns:
The unique event identifier created when the event was initiated. Click the Event ID to see specific details about an event, including user delivery and response statistics, related incidents and signals, messages, timelines, event properties, and more.
The subject of the email message sent from the event.
The date and time when the event began.
The name of the integration or the ID of the person who initiated the event. If initiated by a person, clicking the initiator's name opens their profile card and contact information.
|Related Incident||A link to the incident the event is related to. Clicking the link takes the you to the Incident Console.|
|Targeted Recipients||The users, groups, devices, or dynamic teams who were notified of the event. If there are more recipients than can be displayed in the column, clicking a name in the list displays all of the recipients that were targeted.|
|Form||The name of the form that triggered the event.|
|Source||The name of the workflow or integration.|
The relative priority level of the event as set by the message sender. Higher priority messages have better access to notification resources relative to lower priority messages in the system. Available priority levels are:
To more easily view data in the table, do one or more of the following:
- To sort the content of a column in alphabetical or chronological order, click the column header. (Click the header again to reverse the sort order.)
- To change the width of a column, move the pointer over the edge of the column and when the re-size icon appears, click and drag the column to the desired size.
- To rearrange the columns, click and drag a column header to a new location on the table.
- If the list contains more entries or columns than can be displayed on your screen, scroll horizontally or vertically. The system automatically loads more data as scroll down the page.
- To include or exclude information from the All Events report, click the Columns drop-down menu. Every column (with the exception of the Event ID) can be hidden from view to give you more real estate to see the things that matter to you. When you've hidden a column and want to see it again, it is added as the last column of the table.
The search bar helps you quickly filter information by creating search capsules, which show the search category or parameter on the left side of the pill, and the terms you want to search for on the right. You can create more capsules to further refine your results. (Results must match ALL of the specified criteria.)
To filter your results:
- Click in the Search bar and start typing (a minimum of two characters).
- In the list of possible search categories, select the value for your search. You can also click Show All to create a search capsule for a category and edit the value later.
- xMatters creates a capsule for your criteria in the search bar, and updates the list of returned results.
- To refine your results, do any of the following:
- Create another capsule with different criteria.
- Click the right half of a capsule to edit the search criteria. Select the criteria you want to see, and then click Apply.
- To broaden search criteria, click the x to delete the search capsule.
For most search filters, you can only have one item per capsule and one capsule per search category (for example, you can't search for two initiators at once). You can search multiple values using the Form and Source filter.
Click any link on the Overview tab to automatically create a search capsule for that tab of the report. The information is filtered and only the results you want to see are displayed.
The Notified Users filter returns all events for a specific user who received the notification. This differs from list of Targeted Recipients who are users targeted to be notified, but who might not have received the notification.
Time frame searches
The All Events report displays events for a specific time frame. You can search by a number of days (Past 30 Days, Past 60 Days, or Past 90 Days), or specify a date and time range using the calendar and time pickers, and click Apply. The search results update to match your date range.
You can search by a date range to return all events that were initiated within that time frame. The search results will not include events that were initiated outside of the time frame, even if they were active during the specified time frame.
For example: You set a date range of November1, 2018 - December1, 2018 and click Apply. An event triggered on October 30 that is still active on November 1 is not displayed.
As you add search criteria, the All Events report automatically updates the results to display only the events that match your criteria. The report also highlights the part of each event that matches your search terms.
Include system events
You can also include system events such as device validations, SMS confirmations and deactivations, error responses, temporary absence notifications, and voice recording calls. System events are not included in search results by default. To include system events, click the Include System Events check box.
Certain types of system events are only visible to Company Supervisors while others are available to all users. If you do not see events as expected, you might not have the appropriate permission level for the event type.
If you navigate away from the All Events report when the system events are included, the system events remain in the report when you come back to the All Events report page.
As xMatters continues to collect more events from your system, the All Events report will provide more robust information. Your visibility into that data is based on your pricing plan so you only pay for the data you need. If you search over a time frame that's longer than your pricing plan provides, the All Events report displays a message to let you know.
You can export the contents of the All Events report, or of a single event as a multi-tabbed .xls file to perform additional data analysis. This is useful if you'd like to take a closer look at events sent by a specific initiator, find events that target specific groups, or look at which workflows initiated events.
Export the whole report
To export the report from the main page:
- Filter the report using the search bar, Columns drop-down, or both. All filters applied to the All Events report, such as changing column order, or alphabetically sorting a column, are preserved in the exported file.
- Click Export to select a download option:
- All Columns: Exports the current report results and appends any columns not included in your view in alphabetical order to the end of the column list.
- Current Columns: Exports the current report results and includes only the columns in your view.
The downloaded spreadsheet contains two tabs: Export Details, and Events. The Export Details page contains a summary of the report, including the date range, the initiator of the export, and any search filters applied to the report prior to export. The Events tab contains the list of events for the specified timeframe.
Export the report for a single event
You can also export a report for an individual event. To export the report for a specific event:
- Select an event by clicking its Event ID.
- Click Export. The file is exported to your computer in .xls format.
The downloaded spreadsheet contains three tabs: Event Details, Delivery Details, and Comments. The Event Details page contains a summary of the event, including the date range, the initiator of the export, and any search filters applied to the report prior to export. The Delivery details tab contains the list recipients, on which devices they were contacted, and how they responded to the notification. The Comments tab contains a list of any comments users made when responding to the notification.
Once you've set the search parameters, the All Events report maintains the initial results without refreshing. To refresh the page, while preserving your search criteria, click the Refresh icon.
For more information about a specific event, click its Event ID.