Attach logs and audit entries to Incident Case elements

There are several ways to attach logs and audit entries to an Incident Case.

You can attach selected single logs or audit entries, selected groups of logs or audit entries, or all logs or audit entries that match your query criteria. It is also possible to attach log and audit data to Incident Cases directly from the Logs view.

For more details about the product and how to configure features, click Help or press F1.

Steps

  1. Select Tools > Attach > Logs on the Data Collection tab of the incident case.
    The Logs view opens.
  2. (Optional) To restrict the data that is displayed, specify your search criteria in the Query pane.
  3. Attach a single log or a selected group of logs.
    1. Select the logs you want to attach.
    2. Right-click the selection and select Export > Attach Log Events to Incident.
  4. To attach all logs that match your filtering criteria, right-click any log entry and select Export > Attach Log Events to Incident.
  5. Enter a unique Description for the logs.
    The description is used as the name of the data item in the Incident Case.
  6. Select Other from the Incident Case Target drop-down list.
  7. Select the Incident Case that you want to attach the logs to and click Select.
  8. Specify which logs you want to attach:
    • Select Selected logs to add only the specific log entries you selected.
    • Select Filtered logs from to add all log entries that match your query criteria.
  9. (Optional) Select Create Link Only if you want to create a reference to the logs without duplicating the log files.
  10. (Optional) Select Create also Players based on the following log fields and select the fields if you want to automatically fetch the player information related to the logs.
  11. (Optional) Select Time out to automatically stop the export if it takes too long.
  12. Click OK.
    The selected logs are attached to the incident case and appear in the Data Collection tab.

Attach Logs to Incident Case dialog box

Use this dialog box to attach log entries to an Incident Case.

Option Definition
Description Enter a description of the log entries.
Incident Case target Select the Incident Case to add the log entries to. To browse for more Incident Cases, select Select. To create an Incident Case, select New Incident Case
Attach
  • Selected log or Selected logs — Adds only the specific log entries you selected.
  • Filtered logs from — Adds all log entries that match your query criteria.
Create link only When selected, creates a reference to the logs without duplicating the log files.
Create Players based on the following log fields When selected, automatically fetches the player information related to the logs. Select the log fields to include.
Time out When selected, automatically stops the export if it takes too long.