In BigPanda reporting, entities are the combined life cycle of a detected issue over time. Each entity is represented as a single row in the Incident Timeline, and may include multiple alerts if an alert resolved and was reopened.

Monitoring tools generate events when potential problems are detected in your infrastructure. Over time status updates and repeat events may occur from the same system issue. In BigPanda, raw event data is merged into a singular alert so that you can visualize the life cycle of a detected issue over time.

When an alert is resolved and then reopened during an incident it belongs to the same entity as the original alert and will appear on the same line within the Incident Timeline view. This makes it easy for you to spot reoccurring alerts.

For example, a CPU load alert may start with a warning event, then increase in severity with a critical event, and finally get resolved with a resolution event. All three of these events will be merged into a single alert. Common events that are sent to BigPanda include: “CPU > 95% for more than 5 minutes” and “Port X on Router ABC down”

BigPanda correlates related alerts into incidents for visibility into high-level, actionable problems.

Incident, Alert, and EventIncident, Alert, and Event

Incident, Alert, and Event

1 - Incident
2 - Alert
3 - Event



Some monitoring tools refer to ‘events’ as ‘alarms’ or ‘alerts.’ In BigPanda documentation ‘alert’ is always used to refer to the complete lifecycle of an event.