The Incident Console

Environments filter and group incidents based on properties such as source and priority for easy visibility and action. Environments make it easy for your team to focus on the incidents relevant to their role and responsibilities.

You can use environments to filter the incident feed, create dashboards, set up sharing rules, and simplify incident search.

The Environments Pane 

The incident feed provides a view of all active incidents from the selected environment. You can use the feed to manage and take action on your incidents.

Incident Actions

The incident action icons appear after hovering over an incident.

Incident Actions 

Incident actions that can be performed directly from the feed include resolve, snooze, comment, share, and assign.

See the Respond to Incidents documentation for more information.

Find and Select Incidents

The incident feed contains options that help you find the exact incident or group of incidents that you need.

Search, select, and filter incidents 

Field	Description	Related Links
1 - Search or filter incidents	Search or filter for specific incidents.	Search for Incidents  BigPanda Query Language
2 - Select All	Click the box to select all of the incidents on the page. This allows you to perform actions on multiple incidents at once.	Perform Actions on Multiple Incidents
3 - Filter and Sort	The Filter option is used to filter the feed by the assignee. Use Sort to sort the incident feed by the selected property. The following options are available: Last Changed (Default) Priority Status Created No. of Alerts Duration	Assign an Incident  Incidents in BigPanda

The incident details pane provides a comprehensive view of all information related to an incident. Use the incident details pane to view incident history and take action on incidents.

Automated Incident Analysis leverages Large Language Model AI to provide plain-language incident titles and detailed descriptions built from enriched, actionable incident data.

Automated Incident Analysis helps your team quickly understand causality and impact, dramatically shortening resolution time.

Automated Incident Analysis

For more information, see the AI Incident Analysis documentation.

Incident tags add key information and context right in BigPanda.

Hover over the name of the incident tag to see information about the user who edited the tag and the time and date of the change. Tags that have not been manually edited will show the last date and time that automatic incident enrichment occurred.

Incident tags may be single-select or multi-value.

Incident Tags

See the Incident Tags documentation for more information.

The Active Alerts section displays a summary of the information that appears in the Alerts Tab. Here you can find information about active alerts and take actions on them such as split and merge.

Active Alerts

See the Alerts Tab documentation for more information.

The Root Cause Changes section shows you the change details, changes that were marked as a Suspect, and the change suspect score.

Root Cause Changes

To see full change details, see the Changes Tab .

The Activity section displays the five most recent activities from the Activity tab, with no filtering applied.

To see the full activity history, see The Activity Tab.

The Alerts Tab

Click any alert within the table to view additional details. The details that appear can be configured by your BigPanda administrator. See Manage Alert Views for information on tailoring the alert view.

Each node on the topology graph represents an alert tag value. The tags present in the incident are labeled by type and displayed as icons in the Topology graph.

The numbers in the corners of the nodes indicate the frequency with which each unique tag and value appears in the incident. The more times a tag appears, the higher the likelihood that it’s a contributor to the root cause of the incident.

The lines connecting the nodes in the graph indicate that the linked nodes appear in the incident’s alerts together. Examining nodes with the most links can provide valuable insight into the possible root cause of the incident.

The Topology Graph

By default, BigPanda connects all the correlation tags into a circle. All the primary tags (ie: host) are connected to their associated correlation tags and the secondary tags (ie: check) are connected to their primary tags.

Topology Graph Icons

The default icons that comprise the Topology graph are permanent and pre-defined by BigPanda. Additional configurable fallback icons are provided to allow users to define their own custom nodes.

The following are the nine permanent icons provided by BigPanda to represent the Topology node tag types:

Icon	Type	Associated Tags
	server	'server', 'servers', 'host', 'hosts', 'hostname', 'hostnames', 'host_name', 'host_names', 'device', 'devices', 'instance', 'instances', 'object', 'objects', 'node', 'nodes'
	location	'location', 'locations', 'datacenter', 'datacenters', 'dc', 'store', 'stores', 'site', 'site_code', 'store_id', 'region', 'regions', 'city', 'country', 'geo'
	check	'check', 'checks', 'trigger', 'triggers', 'alert_type', 'alert_name', 'health_rule', 'summary', 'monitor', 'health_rules', 'title', 'titles'
	environment	'environment', 'environments', 'env', 'envs', 'tier', 'tiers', 'stage'
	application	'application', 'applications', 'app', 'apps', 'service', 'services', 'business_service'
	IP	'ip_address', 'ipaddress', 'ipaddresses', 'ip_class_b', 'ip_class_c', 'ip'
	router	'router', 'routers', 'switch', 'switches', 'hub', 'repeater', 'bridge', 'gateway'
	cluster	'rack', 'cluster', 'clusters', 'tower', 'towers'
	team	'owner', 'owners', 'team', 'teams', 'group', 'groups', 'assignment_group', 'responsible_group'

The node filtering options at the top of the Topology tab allows you to show or hide the nodes in the graph according to their corresponding tag type. The numbers beside the nodes in the filter represent the frequency with which the node appears in the topology graph.

Topology Filters

The Changes Tab 

The change table contains columns that provide background information on the change.

You are able to change the size and order of the columns within the change table. Hover over the space between column names to bring up the dividing line or the 6 dots.

Click any one of the changes in the table to see a pop-up with the full list of tags and other data associated with the change.

Change Details

Any environments configured with Automated Incident Analysis will automatically include an AI-generated explanation for why BigPanda marked a change as a potential root cause. This explanation provides more context and better insights into matches, saving you time as you hunt down the root cause of an incident.

Similar incidents are ranked in order based on their similarity score, with the most similar incidents appearing first. See the Similarity Calculation documentation for more information about how the score is calculated.

The activity log filter allows you to select specific event types to narrow the log, allowing you to find exactly what you need.

To filter the activity log, click the Recent Activity drop-down menu, and select one or more categories.

Activity Log Filter