Navigating the Topology Section

Learn how to work with the topology section.

The Topology section is located under the Incidents tab, in the incident details pane. The Topology graph is a customizable visual display of the links between the incident's alert tags, or Nodes.


Learn More

For an overview of how the BigPanda Topology Mesh works, see the Real-Time Topology Mesh feature guide.

The Topology Graph

Each node on the topology graph represents an alert’s tag value. The tags present in the incident are labeled by type and displayed as icons in the Topology graph.
The numbers in the corners of the nodes indicate the frequency with which each unique tag and value appear in the incident. The more times a tag appears, the higher the likelihood that it’s a contributor to the Root Cause of the incident.
The lines connecting the nodes in the graph indicate that the linked nodes appear in the incident’s alerts together. Examining the nodes with the most links can provide valuable insight into the possible Root Cause of the incident.

By default, BigPanda connects all the correlation tags into a circle. All the alerts' primary tags (ie: host) are connected to their associated correlation tags and the secondary tags (ie: check) are connected to their primary tags.
Customizing the graph using the Topology UI API will override BigPanda's default configuration.

Topology Graph Icons

The default icons that comprise the Topology graph are permanent icons pre-defined by BigPanda. Additional configurable fallback icons are provided to allow users to define their own custom nodes.
The following are the 9 permanent icons provided by BigPanda to represent the Topology node tag types:



Associated Tags


'server', 'servers', 'host', 'hosts', 'hostname', 'hostnames', 'host_name', 'host_names', 'device', 'devices', 'instance', 'instances', 'object', 'objects', 'node', 'nodes'


'location', 'locations', 'datacenter', 'datacenters', 'dc', 'store', 'stores', 'site', 'site_code', 'store_id', 'region', 'regions', 'city', 'country', 'geo'


'check', 'checks', 'trigger', 'triggers', 'alert_type', 'alert_name', 'health_rule', 'summary', 'monitor', 'health_rules', 'title', 'titles'


'environment', 'environments', 'env', 'envs', 'tier', 'tiers', 'stage'


'application', 'applications', 'app', 'apps', 'service', 'services', 'business_service'


'ip_address', 'ipaddress', 'ipaddresses', 'ip_class_b', 'ip_class_c', 'ip'


'router', 'routers', 'switch', 'switches', 'hub', 'repeater', 'bridge', 'gateway'


'rack', 'cluster', 'clusters', 'tower', 'towers'


'owner', 'owners', 'team', 'teams', 'group', 'groups', 'assignment_group', 'responsible_group'


The node filtering options at the top of the section can be used to show/hide the nodes in the graph according to their corresponding tag type. The numbers beside the nodes in the filter represent the frequency with which the node appears in the topology graph.

Customizing the Tag Topology UI

Users can customize the Topology UI with the Topology UI API. With this API, BigPanda users can manually structure the visual appearance of the topology between alert tag nodes, charting information that can be used to aid in investigating the root cause of the incident and assessing potential impact.