xMatters allows me to identify the user responsible for the initiation of an event or a user who acknowledges an event. But the xMatters event log does not appear to identify the user who terminates an event manually. Termination can be done not just by the initiator, but also by other users. A manually-terminated event probably was opened in error, or some new detail about the corresponding incident made notification through xMatters unnecessary. In the worst-case scenario, someone might terminate an event to delay/prevent resolution of an incident. Is there a break in the audit trail, or does this information reside somewhere other than the event log?
Date
Votes
3 comments
-
Travis DePuy Hey David, yea, I see what you mean. The /audit api has only annotations and responses, but not much else.
Are you looking to see this in the event report as well as the API or just one or the other?
-
David Hanrahan Like the other members of the Incident Response team to which I belong, I experience xMatters only as a website. I sign in, click Reports, select an Event, then select Log to see the details.
-
Travis DePuy Hey David,
I see what you mean. I agree it would be nice to see the username in the event log. I opened enhancement request PM-5450 to add this to the product and noted our conversation here.
Thanks for chiming in.
Happy Friday!
Please sign in to leave a comment.