Working with Notes, IP Tags, and other Properties in an Event Ticket

In the properties of an Event TicketA work ticket for an Event1. Either a log message that a Manager has standardized (i.e. normalized) for use by TLC (a.k.a. Normalized Messages), or an event or vulnerability imported from a scanner. 2. An 'event message' collected from a Log Source. in an Event-Management Database., you can:

Change the Status of the ticket.

Add Notes about the ticket's Correlated EventAn event of interest identified by the CorrelationThe examination of Normalized Messages for events of interest, along with the ability to initiate appropriate responses; for example, sending an email notification to specified recipients. Engine..

Associate the ticket with other Correlated Events and Event Tickets that may be related.

Create IP Tags for the ticket's Correlated Event (see Working with IP Tags).

To work with the properties of an existing Event Ticket:

1.

In the side bar, select Resources >Ticket CenterThe TLC Console1. Tripwire Log Center Console is the software for the TLC graphic user interface (GUI), or 2. The Tripwire Log Center GUI. Through the TLC Console, you can configure TLC, oversee your TLC environment, and manage log and event data. component that is a complete ticketing and incident-handling system..

To change the ticket's Status, select a Status from the Status drop-down.

To add Notes, select the Notes tab.

To associate Events, Hosts, and other items with the ticket, select the Related Items tab.

To associate other Event Tickets with the ticket, select the Related Tickets tab.

To add IP Tags, select the IP Tags tab.

To add Event References, select the Event References tab.

For further details, see Table 103.