The time at which the event was generated.

The event state: New, Acknowledged, Resolved, or Obsolete.

The actions that caused the event to be obsoleted, for example, the issue was fixed.

For active (new and acknowledged) events, this is the time between detection and the time when the event was last analyzed. For obsolete events, this is the time between detection and when the event was resolved.

This field is displayed for all performance events, and for other event types only after they have been resolved or obsoleted.

The date and time at which the event was last seen as active.

For performance events this value may be more recent than the Event Trigger Time as this field is updated after each new collection of performance data as long as the event is active. For other types of events, when in the New or Acknowledged state, this content is not updated and the field is therefore hidden.

The event severity: Critical (), Error (), Warning (), and Information ().

The event impact level: Incident, Risk, Event, or Upgrade.

The event impact area: Availability, Capacity, Performance, Protection, Configuration, or Security.

The name of the object on which the event has occurred.

When viewing the details for a shared QoS policy event, up to three of the workload objects that are consuming the most IOPS or MBps are listed in this field.

You can click the source name link to display the health or performance details page for that object.

Displays the annotation name and value for the object to which the event is associated.

This field is displayed only for health events on clusters, SVMs, and volumes.

Displays the names of all the groups of which the impacted object is a member.

This field is displayed only for health events on clusters, SVMs, and volumes.

The object type (for example, SVM, Volume, or Qtree) with which the event is associated.

The name of the cluster on which the event occurred.

You can click the cluster name link to display the health or performance details page for that cluster.

The number of objects affected by the event.

You can click the object link to display the inventory page populated with the objects that are currently affected by this event.

This field is displayed only for performance events.

The number of volumes that are being affected by this event.

This field is displayed only for performance events on nodes or aggregates.

The name of the threshold policy that issued the event.

You can hover your cursor over the policy name to see the details of the threshold policy. For adaptive QoS policies the defined policy, block size, and allocation type (allocated space or used space) is also displayed.

This field is displayed only for performance events.

For Active IQ platform events, this is the number of the rule that was triggered to generate the event.

The name of the person who acknowledged the event and the time that the event was acknowledged.

The name of the person who resolved the event and the time that the event was resolved.

The name of the person who is assigned to work on the event.

The following information about alerts is displayed:

Alerts that are disabled are not displayed.

The date and time at which the most recent alert notification was sent.

The mechanism that was used to send the alert notification: email or SNMP trap.

The name of the script that was executed when the alert was generated.