Cisco Physical Access Manager Appliance User Guide, Release 1.1.0
Events & Alarms
Downloads: This chapterpdf (PDF - 7.09MB) The complete bookPDF (PDF - 36.19MB) | Feedback

Events & Alarms

Table Of Contents

Events & Alarms

Contents

Viewing Events, Alarms and Audit Trail Records

Viewing Events

Viewing Alarms

Main Alarm Window

Alarm States

Alarm Detail Window

Alarm Properties

Viewing Audit Trail Records

Viewing Events Using Personnel Photos

Viewing Event Photos

Adding a Color Border to Event Photos (Credential Watch)

Using Filters to Limit the Photos and Doors Events Displayed by Event Photos

Configuring Events and Alarms

Configuring Events Using Event Policy Manager

Event Policy Properties

Automatically Open the Alarm Window

Configuring Alert Sounds

Setting Event and Alarm Priorities

Defining User Privileges for Editing Events

Using Graphic Maps

Graphic Maps Viewer

Icon Colors and Status

Device Commands

Layers and Views

Toolbar and Navigation Controls

Graphic Map Editor

Archiving Historical Events

Using Driver Commands to Copy and Prune Historical Events

Creating an Automated Rule to Archive Historical Events

Creating Reports from the Historical Events Archive


Events & Alarms


This chapter describes how to view events and alarms in Cisco PAM, including how to configure the log codes and other properties that define how events are captured and managed.

Events can also be viewed in the following ways:

View events by personnel photos.

View an audit trail that records events initiated by users.

Use graphic maps to display a floor or building layout to display where events occur. You can also use the map to trigger actions for a device or door.


Tip To create actions that are triggered by an event, see Chapter 13, "Configuring Automated Tasks".
To view live and recorded video for events and alarms, see Chapter 15, "Video Monitoring".


Contents

Viewing Events, Alarms and Audit Trail Records

Viewing Events

Viewing Alarms

Viewing Audit Trail Records

Viewing Events Using Personnel Photos

Viewing Event Photos

Adding a Color Border to Event Photos (Credential Watch)

Using Filters to Limit the Photos and Doors Events Displayed by Event Photos

Configuring Events and Alarms

Configuring Events Using Event Policy Manager

Automatically Open the Alarm Window

Configuring Alert Sounds

Setting Event and Alarm Priorities

Defining User Privileges for Editing Events

Using Graphic Maps

Graphic Maps Viewer

Graphic Map Editor

Archiving Historical Events

Using Driver Commands to Copy and Prune Historical Events

Creating an Automated Rule to Archive Historical Events

Creating Reports from the Historical Events Archive

Viewing Events, Alarms and Audit Trail Records

Events and alarms are captured in real time, and are accessed in the Events & Alarms menu, under the Monitoring sub-menu. The Events window includes all events in the system. Alarms are critical or important events. Audit trails are events initiated by users.

This section includes the following:

Viewing Events

Viewing Alarms

Alarm States

Alarm Detail Window

Viewing Audit Trail Records


Tip See Configuring Events and Alarms to define or modify event types. To copy or move events to a historical events archive, see Archiving Historical Events.


Viewing Events

You can view events in a list, or double-click an event to view detailed information. You can also right-click an event to select commands, change the event properties, or view associated video.


Step 1 Select Events from the Events & Alarms menu, under the Monitoring sub-menu. The Events window (Figure 12-1) shows the most recent events in the access-control system.

Figure 12-1 Events Module Main Window

Step 2 Modify the list of records using the following toolbar controls:

Scroll Lock: Disables or enables automatic scrolling of the list as new events are inserted.

Clear List: Clears all events from the table. Only new events are displayed.

View...: Select an event and click View to display the detail window (Figure 12-2). You can also double-click the event.

Report...: View the selected events in a separate window, or save the information in a file. See Creating Reports, page 5-10.

Columns...: Define the columns displayed and their order. See Revising the Column Display, page 5-14.

Filter: Filter the events to display a sub-set of records. To change the number of viewable events, select Max rows. See Using Filters, page 5-12.

Search: See Search, page 5-15.

Step 3 Select a record and click View... to open the detail window (Figure 12-2). You can also double-click the record.

Figure 12-2 Events Module Detail Window

Step 4 Review the properties and actions for the record. See Table 12-1 for field descriptions.


Note Event fields available vary depending on the type of event. The following example is for a door event.


Table 12-1 Event Properties 

Field
Description

Time

The time and date when the event occurred.

Time received

The time the event was received and stored in the database. If the event was processed by an external device such as a Gateway, this may differ from the time, depending on delays or interruptions in communications between the host and the device.

Site

A site is a single instance of a Cisco PAM database.

Type

The type of event. The types of events are:

Event: A general occurrence within the system, often from external hardware such as a Gateway.

Alarm: An event configured to be an alarm.

Alarm Annotation: An event caused by commenting, clearing, or acknowledging alarms.

Audit Record: An event caused by an operator modifying a record, such as a badge or personnel record.

Device Command: An event caused by an operator executing a device command.

Device Command Result: Notification of a completed device command.

Log Code

The internal code to identify the event. Log codes can be viewed in the Event Policy Manager and defined as alarms. See Configuring Events Using Event Policy Manager.

Description

A description of the event.

Priority

The importance level assigned to the event. Priorities range from a low of -10 to a high of 10. To configure these priorities, see Setting Event and Alarm Priorities.

Device

The device associated with the event, such as a workstation or hardware module.

Edit...: Displays information about the device including type, name, and address. Some fields are editable, depending on the type of device.

View Status...: Displays the status of the associated device. For example, if the workstation is logged in to the system or if the hardware module is enabled.

Commands: lists any available commands for the device. For example, apply a Gateway configuration, or send a message to a workstation.

Show in Graphics Map: see Graphic Maps Viewer.

Credential

If the event has an associated credential (such as a badge or login), the identifying information of the credential (such as a card or username) is displayed in this field.

Edit...: Revise the credential (badge, login, etc.) record associated with the event.

Watch Level

Displays the Credential Watch Level for the badge associated with the event. See Adding a Color Border to Event Photos (Credential Watch).

Edit...: Revise the credential watch level associated with the badge.

Personnel Record

If a personnel record is associated with the event, this field displays the person's name.

Edit...: Edit the personnel record associated with the event.

View Photo...: Displays the associated personnel record photo, if any.

Data

This field displays detailed information about the event, the exact value and meaning of which depends on the type of event. This field is generally for advanced or troubleshooting use. If the event is associated with an attempt to gain access to an access point using a badge that is not in the database, then this field contains the card number.

Target device

The device associated with the event. For example, the device where a command was executed.

Edit: modify the device settings.

camera

The camera associated with the device.

Live Video: opens the video player to view live video from the camera associated with the device.

Event Video: displays archived video associated with the event, if available.

See Chapter 15, "Video Monitoring" for more information.



Viewing Alarms

Alarms are a type of event that indicate the event is important or requires additional attention. You can acknowledge, clear, and add comments to an alarm.

In other modules, an alarm summary is displayed in the lower left-hand corner of the window.

For instructions to open Alarms when an alarm occurs, see Automatically Open the Alarm Window.

This section includes the following:

Main Alarm Window

Alarm States

Alarm Detail Window

Alarm Properties

Main Alarm Window

To view alarms, do the following


Step 1 Select Alarms from the Events & Alarms menu, in the Monitoring menu. The main window (Figure 12-3) shows the most recent 500 uncleared alarms.

Figure 12-3 Alarms Module Main Window

Step 2 Modify the list of records using the following toolbar controls:

Scroll Lock: Disables or enables automatic scrolling of the list as new events are inserted.

Report...: View the selected alarms in a separate window, or save the information in a file. See Creating Reports, page 5-10.

Columns...: Define the columns displayed and their order. See Revising the Column Display, page 5-14.

Filter: Filter the alarms to display a sub-set of records. To change the number of displayed alarms, select Max rows. See Using Filters, page 5-12.

Step 3 Change the state of an alarm, add a comment, or acknowledge the alarm.

Use the following toolbar buttons or right-click the entry and select an option from the menu.

Ack: Acknowledges an alarm, placing it in an acknowledged state. This means that the operator is aware of the alarm, but it has not been resolved. A solid orange color indicates this state.

Comment: Adds a comment to an alarm. Does not change the state of the alarm. A new comment may be entered, or a previously entered comment may be selected from the drop-down list.

Clear: Places the alarm in a cleared state (resolved) and changes the icon to green.

See Alarm States for more information. The alarms state options are also available in the detail window.

Step 4 Select an alarm and click View... to open the detail window (Figure 12-4). You can also double-click the record. See Alarm Properties for field descriptions.


Alarm States

An alarm may be in one of several states, and these states have an associated solid or blinking color.

Table 12-2 Alarm States 

State
Color
Description

Active

Blinking red

The alarm is new, unacknowledged, and unresolved.

Acknowledged

Solid orange

An operator is aware of the alarm, though it remains unresolved.

Cleared

Solid green

The alarm has been acknowledged and resolved. Note that the default filter in the Alarms module hides cleared alarms, so these are generally not seen.


Alarm Detail Window

The detail window (Figure 12-4) displays alarm properties and provides a number of actions:

The Alarms tab displays the properties of the alarm and provides a number of actions. See Alarm Properties for more information.

The Duplicates tab displays duplicate alarms. All attributes are the same except the time.

The Annotations tab displays any annotations made to the selected alarm. Valid alarm annotations include:

Acknowledge Alarm

Clear Alarm

Comment Alarm

Figure 12-4 Alarms Module Detail Window

Alarm Properties

An alarm has the following properties, available in the table view or the detail window:

Table 12-3 Alarm Properties 

Field
Description

Time

The date and time when the alarm occurred.

Time Received

The time the alarm was received and stored in the database. If the event was processed by an external device such as a Gateway, this may differ from the time, depending on delays or interruptions in communications between the host and the device.

Site

The site where the alarm occurred.

Log Code

The internal code to identify the event. Log codes can be viewed in the Event Policy Manager and defined as alarms. See Configuring Events Using Event Policy Manager.

Priority

The level of importance assigned to the alarm. Priorities range from a low of -10 to a high of 10. To configure these priorities, see Setting Event and Alarm Priorities.

Description

A description of the alarm.

Device

The device associated with the alarm, such as a workstation or hardware module.

Edit...: Displays information about the device including type, name, and address. Some fields are editable, depending on the type of device.

View Status...: Displays the status of the associated device. For example, if the workstation is logged in to the system or if the hardware module is enabled.

Commands: lists any available commands for the device. For example, apply a Gateway configuration, or send a message to a workstation.

Show in Graphics Map: see Graphic Maps Viewer.

Credential

If the alarm has an associated credential (such as a badge or login), the identifying information of the credential (such as a card or username) is displayed in this field.

Edit...: Revise the credential (badge, login, etc.) record associated with the event.

Watch Level

Displays the Credential Watch Level for the badge associated with the event. See Adding a Color Border to Event Photos (Credential Watch).

Edit...: Revise the credential watch level associated with the badge.

Address

The address of the device.

Personnel Record

If a personnel record is associated with the alarm, this field displays the person's name.

Edit...: Edit the personnel record associated with the event.

View Photo...: Displays the associated personnel record photo, if any.

Data

This field displays detailed information about the event, the exact value and meaning of which depends on the type of event. This field is generally for advanced or troubleshooting use. If the event is associated with an attempt to gain access to an access point using a badge that is not in the database, this field contains the card number.

Count

The number of times this alarm has occurred, including duplicates. Duplicate alarms have all attributes the same except time).

Alarm State

The state of the alarm. See Alarm States.

Ack...: Acknowledges the alarm, placing it in an acknowledged state. This means that the operator is aware of the alarm, but it has not been resolved. A solid orange color indicates this state.

Clear...: Clears the alarm, placing it in a cleared state. This means that the alarm has been resolved. A solid green color indicates this state.

Comment...: Adds a comment to an alarm. Does not change the state of the alarm. A new comment may be entered, or a previously entered comment may be selected from the drop-down list.

View Instructions...: Opens a detail window with instructions for dealing with the type of alarm, if any.

Target device

The device associated with the event. For example, the device where a command was executed.

Edit: modify the device settings.

camera

The camera associated with the device.

Live Video: opens the video player to view live video from the camera associated with the device.

Event Video: displays archived video associated with the event, if available.

See Chapter 15, "Video Monitoring" for more information.


Viewing Audit Trail Records

Audit trail records are events caused when an operator modifies a record, such as a badge or personnel record. Audit trail records include the user who performed the action, the date, time, and the state of the object before and after the edit. To view audit trail records, do the following:


Step 1 Select Audit Trail from the Reports menu. The main window (Figure 12-5) shows the most recent audit records.

Figure 12-5 Audit Trail Main Window

Step 2 Modify the list of records using the following toolbar controls:

Scroll Lock: Disable or enable automatic scrolling of the list as new audit records are inserted.

Report...: See Creating Reports, page 5-10.

Columns...: See Revising the Column Display, page 5-14.

Filter: See Using Filters, page 5-12.

Step 3 Select a record and click View... to open the detail window (Figure 12-6). You can also double-click the record.

Step 4 Review the properties and actions for the record. See Table 12-4 for field descriptions.


Figure 12-6 Audit Trail Detail Window

Table 12-4 Audit Trail Event Properties 

Field
Description

Time received

The time the event was received and stored in the database. If the event was processed by an external device such as a Gateway, this may differ from the time, depending on delays or interruptions in communications between the host and the device.

Site

A site is a single instance of a Cisco PAM database.

Type

The type of event. The types of events are:

Event: A general occurrence within the system, often from external hardware such as a Gateway.

Alarm: An event configured to be an alarm.

Alarm Annotation: An event caused by commenting, clearing, or acknowledging alarms.

Audit Record: An event caused by an operator modifying a record, such as a badge or personnel record.

Device Command: An event caused by an operator executing a device command.

Device Command Result: Notification of a completed device command.

Log Code

The internal code to identify the event. Log codes can be viewed in the Event Policy Manager and defined as alarms. See Configuring Events Using Event Policy Manager.

Priority

The importance level assigned to the event. Priorities range from a low of -10 to a high of 10. To configure these priorities, see Setting Event and Alarm Priorities.

Description

A description of the event.

Device

The device associated with the event, such as a workstation or hardware module.

Edit...: Displays information about the device including type, name, and address. Some fields are editable, depending on the type of device.

View Status...: Displays the status of the associated device. For example, if the workstation is logged in to the system or if the hardware module is enabled.

Commands: lists any available commands for the device. For example, apply a Gateway configuration, or send a message to a workstation.

Show in Graphics Map: see Graphic Maps Viewer.

Credential

If the event has an associated credential (such as a badge or login), the identifying information of the credential (such as a card or username) is displayed in this field.

Edit...: Revise the credential (badge, login, etc.) record associated with the event.

Watch Level

Displays the Credential Watch Level for the badge associated with the event. See Adding a Color Border to Event Photos (Credential Watch).

Edit...: Revise the credential watch level associated with the badge.

Personnel Record

If a personnel record is associated with the event, this field displays the person's name.

Edit...: Edit the personnel record associated with the event.

View Photo...: Displays the associated personnel record photo, if any.

Data

This field displays detailed information about the event, the exact value and meaning of which depends on the type of event. This field is generally for advanced or troubleshooting use. If the event is associated with an attempt to gain access to an access point using a badge that is not in the database, then this field contains the card number.

Modified Record

The item changed by the user.

View Current...: Opens a detail window of the modified record, as it exists currently.

View Before...: Opens a detail window of the modified record, as it existed before the modification.

View After...: Opens a detail window of the modified record, as it existed after the modification.


Viewing Events Using Personnel Photos

Use the Event Photos module to display events using personnel photos.

This section includes the following:

Viewing Event Photos

Adding a Color Border to Event Photos (Credential Watch)

Using Filters to Limit the Photos and Doors Events Displayed by Event Photos

Viewing Event Photos

Event Photos displays events along with a personnel photo and other information in real-time.


Step 1 Select Event Photos in the Events & Alarms menu, in the Monitoring sub-menu.

Step 2 Select a photo to display the associated event (Figure 12-7).

Figure 12-7 Event Photos Window


Note The screen appears blank (without fields or data) until a photo event is available for display.


Step 3 From the main window, you can perform the following actions:

Filter: Filter to display specific types of events (see Using Filters, page 5-12 and Using Filters to Limit the Photos and Doors Events Displayed by Event Photos).

View: Select the type of display preferred for viewing event photos. Options include:

Scroll Photos From: In a left to right layout the most recent event is displayed at the right of the screen. The opposite is true for right to left.

Show Event Detail Buttons: Displays the buttons in the detail area.

Max Photos: Defines the number of most recent photos to display in the window.

Resume: Resume the scrolling of new events.

Pause: Pause the scrolling of new events.


Tip See Viewing Events, Alarms and Audit Trail Records for field descriptions. To make the event fields read-only, see Configuring Events and Alarms.



Adding a Color Border to Event Photos (Credential Watch)

Credential watch allows you to display Event Photos with a colored border to provide additional information regarding the status of the badge holder.

For example, if a guard uses Event Photos to view photos of the people accessing a door. a color border can visually signify if the user is a contractor, visitor, etc.

The default credential watch levels are:

Low: a yellow border around the photo.

Medium: an orange border around the photo.

High: a red border around the photo.

You can modify these definitions, or create custom watch levels. For example, if the badge holder has been employed less than one year, an ORANGE border may appear around the photo. If the badge holder is a contractor, a RED border may appear around the photo.

To configure Credential Watch, do the following:

 
To do this
Use this display

Step 1 

Enable Credential Watch Levels menu:

a. Select System Configuration from the Admin menu.

b. Select the Miscellaneous tab.

c. Select the Enable credential watch levels check-box.

d. Click Save.

e. Log out and log back in to Cisco PAM to activate the changes (select Log Out from the Options menu).

Step 2 

Add credential watch access privileges for user profiles:

a. Select Profiles from the Users menu.

b. Click Add or select an existing profile and click Edit.

c. Click the Module tab.

d. Click Quick Launch.

e. Select the options in the panel to the right.

f. Click Save and Close.

(Optional) Assign the profile to the user login, if necessary:

a. Select Login from the Users menu.

b. Click Add or select an existing user and click Edit.

c. Select Profiles.

d. Select the profile that includes the required access privileges.

e. Click Save and Close.

Step 3 

(Optional) Create or edit the credential watch definitions.

Tip This defines the photo border color and description:

a. Select Credential Watch Levels from the Admin module.

b. Click Add or select an existing level and click Edit.

c. Enter the Name of the level. For example: New Employee.

d. Enter the order number of the level to define the hierarchy of the levels. For example, enter 0 to display the new level at the top of the list. This can also define the relative importance or severity of the levels.

e. Click Choose to select a border color for the photos when using Event Photos.

f. Click Save and Close.

Step 4 

Add the credential watch level to a badge configuration:

a. Select Badges from the Admin module.

b. Click Add or select an existing badge and click Edit.

c. Select the General tab.

d. Select the Watch Level from the drop-down menu. For example, New Employee.

Step 5 

Open the Event Photos module: select Event Photos from the Events & Alarms menu, in the Monitoring sub-menu.

Step 6 

Present the badge to the door card reader to display the associated badge photo in Event Photos. In this example, a dark blue border is displayed and the watch level is "New Employee".

Note The screen appears blank (without fields or data) until a photo event is available for display.

Using Filters to Limit the Photos and Doors Events Displayed by Event Photos

By default, Event Photos displays the photos and events for any badge presented to any door on the system. Use the Filter to display only events for a specific door or set of doors. For example, the guard at the front entrance should only see the event photos for badges presented at that particular door.

In addition, the photo associated with a badge is shown two times by default: one time when the credential is read, and one time for the Grant Access event. Use Filters to only display the photo once.

Complete the following instructions to limit the doors and photos displayed by Event Photos:


Step 1 To select specific doors to display event information:

a. Select Edit Filter from the Filters toolbar menu.

b. In the filter window, select the Device tab, and then select the Choose button(Figure 12-8).

c. Select the doors or devices that will display events in Event Photos.

d. Click OK to close the Choose Devices window.

e. Click OK to close the Filter window and save the changes.

Figure 12-8 Filter Device Window

Step 2 To display the photo once for each badge presentation:

a. In the filter window, select the General tab, and then select the Choose button in the Log Code field (Figure 12-9).

Figure 12-9 Filter Log Code

b. Select the events to be displayed in Event Photos, as shown in Figure 12-10. For example, select Door Grant Access.

Figure 12-10 Select the Log Code

c. Click OK to close the windows and save the changes.


Configuring Events and Alarms

This section includes instructions to create or modify log codes, define event types, and set event and alarm priorities. In addition, you can limit the type of events seem by users, and set the Alarms module to automatically open when an alarm occurs.

The section includes the following information:

Configuring Events Using Event Policy Manager

Automatically Open the Alarm Window

Configuring Alert Sounds

Setting Event and Alarm Priorities

Defining User Privileges for Editing Events


Tip To automatically trigger actions when an event occurs, see Chapter 13, "Configuring Automated Tasks".


Configuring Events Using Event Policy Manager

Each event or alarm record includes a log code that defines the event type and actions associated with the event. The Event Policy Manager allows you to specify the following for each available event log code:

Whether it will be treated as an alarm or an event.

Whether it will be saved to the database.

The priority of the event.

The sound associated with the event.

The color associated with the event.

To add or modify event properties, do the following:


Step 1 Select Event Policy Manager from the Events & Alarms menu, in the Configuration sub-menu.

Step 2 The main window (Figure 12-11) shows all event policies defined within the system.

Figure 12-11 Event Policy Manager Module Main Window

Step 3 The toolbar includes the following actions:

Edit...: select an entry and click Edit... to open the detail window and modify an existing record. You can also double-click the entry.

Add...: click Add... to open the detail window and add a new event policy.

Delete...: select an entry and click Delete to delete the selected event policy.

Figure 12-12 shows the Event Policy detail window. Each field is described in Table 12-5

Figure 12-12 Event Policy Manager Detail Window


Event Policy Properties

An event policy has the properties described below, available in the table view or detail window:

Table 12-5 Event Policy Properties 

Field
Description

Log Code

An abbreviated code uniquely identifying the event.

Log code description

The description associated with the log code.

Applies To

The type of event this log code applies to.

Log code category

The category associated with the log code.

Device

If specified, the policy only applies to the this device. Use the Choose button to select the device related to the event policy.

Partition

If present, the policy only applies to this partition.

Classification

If present, the policy only applies to this classification.

Anti-passback area

If present, the policy only applies to this anti-passback area.

Anti-passback area (exit)

If present, the policy only applies to this anti-passback area exit.

Entrance

If present, the policy only applies to this entrance.

Zone

If present, the policy only applies to this zone.

Hierarchical location

If present, the policy only applies to the doors in this location.

Device type

If present, the policy only applies to devices of this type.

Is Alarm

Specifies if events with this log code will be recorded as an alarm. Alarms are shown in the Alarms module.

Is Recorded

Specifies if events with this log code will be recorded to the database. If unchecked, there is no record of these events occurring. This should only be unchecked by advanced users under the advice of Cisco technical support.

Priority

A priority used for sorting events and alarms. Positive priorities are above normal priority, while negative priorities are below normal priority. Zero is normal.

Alert Sound

The sound to be played, if Is Alarm is checked. Available alert sounds are managed in Configuring Alert Sounds.

Background color

The color of the event entry. Click Choose to select a color. Click Clear to restore the default white background.

Foreground color

The color of the event text. Click Choose to select a color. Click Clear to restore the default black text.


Automatically Open the Alarm Window

To automatically open the alarm window when an alarm occurs, do the following:


Step 1 Select Profiles from the Users menu.

Step 2 Click Add, or select an existing profile and click Edit.

Step 3 Select the General tab, and the sub-menu Events/Alarms (Figure 12-13).

Step 4 Select the check-box for Open Alarms Module.

Step 5 Click Save and Close.


Tip Be sure that the user has access to the Alarms module. Click the Modules tab, select Alarms from the module list, and select the checkbox for Allow access to module. For more information, see Defining User Profiles for Desktop Application Access, page 6-2.


Figure 12-13 Profile: General Tab


Configuring Alert Sounds

Alert sounds play when an alarm occurs (if the alarm is configured with one of the available sounds). This section includes instructions to add or modify the available sounds. For instructions to assign the sounds to an alarm type, see Configuring Events Using Event Policy Manager.

To add or modify alert sounds, do the following:


Step 1 Select Alert Sounds module from the Events & Alarms menu, in the Configuration sub-menu.

Step 2 The main window (Figure 12-14) shows the currently defined alert sounds.

To modify an existing alert sound, select the entry and choose Edit... to open the detail window. You can also double-click the entry.

To add a new alert sound, click Add... to open the detail window.

Click Delete to delete the selected entry.

Figure 12-14 Alert Sound Module Main Window

Step 3 Edit a new or existing alert sound using the detail window (Figure 12-15):

Figure 12-15 Alert Sounds Module Detail Window

a. Click Import WAV File and select a sound file from a local drive. Click Play WAV File... to preview the alert sound.

b. Enter a name for the alert sound.

c. Click Save & Close.


Setting Event and Alarm Priorities

Priorities are used to sort or filter events and alarms. To define the priorities for an event or alarm log code, edit the Priority setting for the Log Code using the Event Policy Manager:


Step 1 Open the Event Policy Manager module in the Events & Alarms: Configuration menu. Edit an event policy by selecting it and clicking the Edit... button in the toolbar. This opens the Event Policy window (Figure 12-16).

Figure 12-16 Event Policy Window

Step 2 Use the Priority drop-down arrow to change the priority of the event or alarm. Positive priorities are above normal priority, and negative priorities are below normal. Zero is normal.

Step 3 Click Save and Close to save your changes.

For more information, see Configuring Events Using Event Policy Manager.


Defining User Privileges for Editing Events

To change the event fields to read-only, change the access privileges a the user profile:


Step 1 Select Profiles in the Users menu.

Step 2 Click Add or select an existing profile and click Edit (Figure 12-17).

Step 3 Click the Data Types tab.

Step 4 Click the Data Type that you want to edit. For example, Badge, Personnel Record, etc.

Step 5 Select or deselect the options for View, Create, Modify, or Delete.

Step 6 Click OK to save the changes.

Figure 12-17 Selecting Editable Fields in the Profiles Module


Using Graphic Maps

Graphic Maps provide a visual representation of the devices available in a location. Icons representing the devices provide real-time status and alarms information, and allow the user to trigger actions such as viewing live video or denying access to a door. Automated rules can also be invoked, and icons representing a location provide status and alarm summary for all the devices assigned to that location.

This section describes the map viewer, and the editor used to create the maps:

Graphic Maps Viewer

Graphic Map Editor

Graphic Maps Viewer

Select Graphic Maps Viewer in the Events & Alarms menu (in the Monitoring submenu).

Figure 12-18 shows a sample map. In the top left frame, click + and - to expand and collapse the map folders and view associated devices. Right-click a device to view the actions and commands available for that device.

Figure 12-18 Graphic Maps Viewer Main Window

Icon Colors and Status

On the map, icons representing devices, automated rules, and locations provide status information using two colors: the inside fill color and the outside ring color.

Inside Fill Color

The inside color represents the device state.

Light Green: Represents armed, secure, online states.

Red: Represents unknown, active, offline states.

Dark Blue: Represents disarmed, inactive states.

Light Blue: Represents disarmed, active.

Outer Ring Color

The outer ring color represents the alarm state.

Green: Represents a normally operating device free of any alarms.

Orange: Represents a device in an acknowledged alarm or alarms state.

Red: Represents a device in an alarm state.

Device Commands

Right-click an icon to view the available commands for that device. For example, you can view live video for a camera, or deny access for a door, depending on your access privileges.

Tip To trigger an automated rule, click the icon.

Layers and Views

Layers

Layers allow you to hide or display categories of icons, depending on the map configuration.

Click the Layers tab in the bottom left of the window, then right click the layer title and select Toggle Layer Visibility.

For example, turn the Doors layer off to hide the door icons. Toggle the layer on to display the icons.

Layers that contain one or more devices have a + sign to the left of the layer icon, allowing it to be expanded to show the associated devices.

Views

Click the Views tab to select the available views. For example, one view may display an entire floor plan, while another view displays only the reception area.

Toolbar and Navigation Controls

Use the following menu controls to select maps and adjust the map display.

Table 12-6 Toolbar and Navigation Controls 

Control
Description

Back Arrow

Navigates backwards in the viewed maps history.

Forward Arrow

Navigates forward in the viewed maps history.

Up Arrow

Navigates to maps linked to the displayed map.

All Maps

Opens a menu containing all maps for easy navigation regardless of whether the sidebar is shown.

Layers

Displays all layers in the open map, and allows you to show and hide layers, regardless of whether the sidebar is shown.

Views

Displays a selected map view, regardless of whether the sidebar is shown.

Hide/Show Sidebar

Hides/Shows the Maps, Layers, and Views tabs in the sidebar.

Print

Prints the currently displayed map.

Zoom

The zoom tool is located in the upper right of the Graphic Maps Viewer. Use the drop-down arrow to select a zoom percentage, or type in custom zoom percentage number and press Enter. To cancel the zoom and reset the view, use the zoom tool drop-down and select Reset, or right-click the map and click Reset View.

Zoom Marquee

To zoom a map to a specific rectangular area; hold down the Control button, click and drag a rectangle on the map. Release the mouse button and the map will zoom to fit the rectangle. To scroll the map hold down the Shift button, click the map and drag to a desired location.


Graphic Map Editor

Use the Graphic Map Editor to create facility maps and add icons that represent doors, cameras, locations and automated rules. Once configured, the maps are viewed using the Graphic Map Viewer.


Caution Do not use the Graphic Maps Editor while other client workstations have the Graphic Maps Viewer or Graphic Maps Editor open. Use of the Graphic Maps Editor while any other client workstations have the Graphic Maps Viewer or Graphic Maps Editor opened may result in system errors.

To create or modify graphic maps, do the following:

 
To do this
Use this display

Step 1 

Select Graphic Map Editor from the Admin menu.

Step 2 

(Optional) Add a folder for map organization:

a. Click New Folder.

b. To rename the folder, right click the folder and select Folder Properties from the command menu.

Step 3 

Create a new map:

a. Click New Map.

b. Select a background image from a local drive. Background images are typically floor or building layouts.

Tip You can also select options to create folders and maps by right-clicking a map folder.

Step 4 

(Optional) Use the clip and zoom controls to adjust the image:

Clip: use the Clip button to crop a map image. To clip a map, click the Clip button, click and drag a rectangle on the graphic map, and then click the Clip again to crop the map.

Zoom: zoom in or out using the zoom tool in the upper right of the window. Click + or - to zoom in and out, select a zoom percentage, or enter the percentage in the box.

To cancel the zoom and reset the view, select Reset from the drop-down menu, or right-click the map and click Reset View.

Zoom Marquee: to zoom a map using the zoom marquee feature, hold down the Control button, click and drag a rectangle on the map. Release the mouse button and the map will zoom to fit the rectangle.

Tip To move a map hold down the Shift button, click the map and drag to a desired location. Navigate between modifications by using the Undo and Redo buttons.

Step 5 

(Optional) Right-click the map to access the following functions:

Reset View: cancel a zoom view and return to 100%.

Change Background: selects a new background image for the map.

Edit Map Properties: defines the properties of the map, such as the icon scale.

Edit View Properties: defines layout properties.

Toggle Layer Visibility: turns layer visibility on or off.

Edit Layer Properties: edits the layer name.

Step 6 

Add a devices or doors to the appropriate location on the map.

The the device will report real-time status in the Graphic Maps Viewer.

a. Click the Devices tab to view the Gateways, doors and drivers.

b. Drag a device to an appropriate place on the map.

Tip To add Door Groups, click the Device Groups tab and drag the group to the map. See Configuring Door Groups, page 11-6 for more information.

Step 7 

Add locations to the map.

The the device will report real-time status in the Graphic Maps Viewer.

a. Click the Locations tab.

b. Drag a location to an appropriate place on the map.

Tip Click a Layer icon in the bottom left window to organize the map elements into different layers. For example, click a layer and add the devices, then click another layer and add locations or commands. You can turn layers on or off by right-clicking the layer and selecting Toggle Layer Visibility. Select Edit Layer Properties to rename the layer. A green check indicates the active layer (the layer that new icons will be added to).

Step 8 

Add commands to the map. Users can click on command icons in Graphic Maps Viewer to invoke the command.

a. Click the Commands tab to view the commands available for the selected device.

b. Drag a command to the map. The Device Command window opens.

c. Click OK to accept the selected command and add it to the map.

Step 9 

(Optional) To select a different device and command combination using the Device Command window, do the following:

a. Select the device(s)

Single: click Choose and select a single device or door from the Hardware view, as shown in the example to the right.

Multiple (by filter) of type: select a device type from the drop-down menu. To refine the selection, click Filter and select the filter options.

Multiple (by group) of type: select a device group from the drop-down menu.

b. Select a command for the device(s): click Choose and select a command from the list.

c. (Optional) Click Choose to select the Parameters for the command, if required.

Note If Choose is shown in black, you must click the button to continue. Select a parameter from the list. If the message "Are you sure you want to continue?" appears, click OK. This message indicates that a parameter is not required.

d. Click OK.

Step 10 

(Optional) Add automated rules to the map.

a. Click the Devices tab and select the Automation Driver.

b. Click the Command stab and drag the icon for Invoke Automation Rule to the map. The Device Command window appears.

Note In the Device Command window, the selected device is Automation Driver, and the selected command is Invoke Automation Rule.

c. To select the rule, click Choose in the Parameters field and select the rule. To define rules, see Configuring Automated Tasks Using Global I/O, page 13-14.

Step 11 

(Optional) Create multiple views of the map.

a. Zoom and position the map to focus on a specific area or set of devices.

b. Click View in the top menu bar.

c. Use your mouse to click and drag a border within the map.

d. Release the mouse button to select the area. The The Map View window appears.

e. Adjust the View properties, if necessary. Click Make default view to make the view the default when the map is opened in the Graphic Map Viewer.

f. Click OK to save the changes and create the new view.

g. To change the name and other settings, right-click the view name and select Edit View Properties.

Step 12 

(Optional) Edit the icon properties.

Right-click a map icon and select Edit Icon Properties.

To change the icon image, click Choose in the Image section of the Properties window.

Step 13 

Click Save. Changes are visible in the Graphic Maps Viewer only after they are saved.

Archiving Historical Events

Historical events are old events or alarms that you wish to remove from the main database. Archiving historical events are removed from the live Events & Alarms listings. This can improve system performance and simplify system monitoring since only the latest, most relevant, events and alarms are displayed.

There are three steps to archiving historical events:

1. Copy historical events: copies old events to a separate Cisco PAM database table. The events are still visible in Cisco PAM Events & Alarms. They are also included in system backups, and you can run reports on the events.

2. Prune historical events: deletes copied events from the main database table. The historical events are still in the Cisco PAM database, but are not visible in Events & Alarms. The historical events are still included in system backups, and you can run reports on the events.

3. Archive historical events: creates a compressed, password-protected file of the historical events, and deletes the events from the Cisco PAM database. This can significantly reduce the size of the Cisco PAM database and backup file.

The archive file can be copied to another location, and restored to the Cisco PAM database if necessary. The file can also be used by other applications to view old events or run reports. In addition, the historical event records are self-contained: referenced objects, such as a person's name and card number, are retained even if the original record is deleted. Reports on historical events can also span a much longer time range than is normally possible for live events.

To copy, prune, and archive historical events, enable the Historical Events driver. You can use the driver commands to copy and prune old events, or create an automated task to perform these actions on a regular schedule.

This section includes the following instructions:

Using Driver Commands to Copy and Prune Historical Events

Creating an Automated Rule to Archive Historical Events

Creating Reports from the Historical Events Archive


Tip For instructions to backup Cisco PAM data and configurations, or create a .zip archive of historical events, see Appendix A, "Backing Up and Restoring Data".


Using Driver Commands to Copy and Prune Historical Events

 
To do this
Use this display

Step 1 

Enable the Historical Events driver.

Select Hardware from the Doors menu.

Right-click the Driver Manager, and select New Historical Events Driver....

Step 2 

Enter the number of days that events remain in the live events database before they are moved to the historical events database.

a. Click the Driver tab.

b. In Live events window (days), enter the number of days. For example, enter 30 to keep events in the live view for 30 days. After midnight on day 30, the events are moved to the historical events.

Note The number is rounded to midnight of the last day.

c. Click Save and Close.

Step 3 

Right-click the driver and select Start.

Step 4 

Right click the driver and select Start Copying Live Events.

This process copies old events to the historical events database. The events are still in the main database.

Tip Perform these commands during off-peak hours to avoid impact to system performance.

Step 5 

Right click the driver and select Stop Copying Live Events.

This stops the copy process. If you do not stop the process, copying continues indefinitely and impacts system performance. Allow a sufficient amount of time for the copy process to complete.

See Creating an Automated Rule to Archive Historical Events to create an automated process that invokes these commands on a set schedule.

Step 6 

Right click the driver and select Start Pruning Live Events. The following conditions apply:

Pruning will fail if any events or alarms have pending actions (such as an automated rule). Select the Clean up queues command to clear actions for old events or alarms.

Pruning deletes events from the live events database only if they were copied to the historical events database.

Alarms are deleted only if all alarm duplicates and annotations are past the live events time.

Tip Perform these commands during off-peak hours to avoid impact to system performance.

Step 7 

Right click the driver and select Stop Pruning Live Events.

This stops the pruning process. If you do not stop the process, pruning continues indefinitely and impacts system performance. Allow a sufficient amount of time for the pruning process to complete.

See Creating an Automated Rule to Archive Historical Events to create an automated process that invokes these commands on a set schedule.

Step 8 

Verify that event pruning was successful, and clear the event queue, if necessary.

Events or alarms that have a dependant action (such as an automated rule), cannot be pruned. For example, if the related device (such as a Gateway) is disabled or deleted, then the event will not clear and pruning will fail. To clear these events and allow pruning to continue, invoke the Clean up queues command, as described in the following example:

a. Select Events from the Events & Alarms menu, under the Monitoring sub-menu.

In the example to the right, the second event from the bottom reads "Successfully pruned 0 events". This means that the events could not be prunned since one or more events have a dependant action (such as an automated rule).

b. To clear any dependencies for the events, right-click the Historical Events Driver and select the Clean up queues command.

c. Verify that the events were pruned. In the example to the right, the event outlined in green reads "Successfully pruned 2554 events". This indicates that the historical events were successfully pruned.

Step 9 

(Optional) Archive the historical events database to remove old events from the main database.

See Appendix A, "Backing Up and Restoring Data" for more information.

Creating an Automated Rule to Archive Historical Events

To automatically move old events from the live events database to the historical events database, create automated rules to copy and prune old events. Create automated rules to clean up the event queues, start and stop copying, and then start and stop pruning, in that order.

Choose task times that minimize system impact but considers the latency between when an event occurs and when it is available in the historical events table.

If performance is critical and latency is not, configure copying and pruning during off-peak hours.

If low latency is important, and the copying and pruning does not impact system performance, configure the actions to occur around the clock.


Tip Schedule data backups to occur after event pruning is complete to reduce the amount of data to be backed up. See Appendix A, "Backing Up and Restoring Data" for instructions.


The following instructions describe how to create the automated tasks to copy and prune historical events. For example, create a rule for each of the following tasks:

Rule 1: 6:30 PM Clean Up Queues

Rule 2: 7:00 PM Start Copying Live Events

Rule 3: 12:30 AM Stop Copying Live Events

Rule 4: 1:00 AM Start Pruning Live Events

Rule 5: 6:00 AM Stop Pruning Live Events

 
To do this
Use this display

Step 1 

Enable the Historical Events Driver, if necessary.

a. Select Hardware from the Doors menu.

b. Right-click the Driver Manager, and select New Historical Events Driver....

c. Enter the number of days that events remain in the live events database before they are moved to the historical events database.

Click the Driver tab.

In Live events window (days), enter the number of days. For example, enter 30 to keep events in the live view for 30 days. After midnight on day 30, the events are moved to the historical events. The number is rounded to midnight of the last day.

Click Save and Close.

d. Right-click the driver and select Start.

See Using Driver Commands to Copy and Prune Historical Events for more information.

Step 2 

Enable the Automation Driver, if necessary.

See Enabling the Automation Driver, page 13-12 for more information.

Step 3 

Select Global I/O from the Events & Alarms menu. The Automates Rules window opens and lists the currently defined rules.

Step 4 

Click Add to create a new automated rule.

Step 5 

Enter a name and schedule for the rule.

a. Name: enter a descriptive name for the rule. For example, Clean up event queues.

b. Click New to create a new Trigger.

c. In the Trigger Type window, select Periodic and then click OK.

d. In the Periodic window, select the Interval: Monthly, Weekly, or Daily.

e. Select the day of week or day of month, if necessary, and the Time of day (in a 24-hour format).

f. Click OK.

Step 6 

Create an action to execute a command:

a. In the Actions section, click Add.

b. Select Device Command and click OK.

Step 7 

Select the device driver and associated command:

a. Select Single in the Device(s) section.

b. Click Choose and then select the Historical Events Driver. Click OK.

c. Select a command.: Click Choose and then select the command. For example, select Start Copying Live Events. Click OK.

d. Click Save and Close to close the Device Command window. The action is added to the Actions list.

Step 8 

(Optional) Specify the notification and event options, if necessary.

See Configuring Global I/O Automated Rules, page 13-12 for more information.

Step 9 

Click Save and Close to create the rule and add it to the rules list.

Step 10 

Repeat these steps for each command. Create separate commands to stop and start copying and stop and start pruning. For example:

Rule 1: 6:30 PM Clean Up Queues

Rule 2: 7:00 PM Start Copying Live Events

Rule 3: 12:30 AM Stop Copying Live Events

Rule 4: 1:00 AM Start Pruning Live Events

Rule 5: 6:00 AM Stop Pruning Live Events

Creating Reports from the Historical Events Archive

To run reports on historical events that were copied to the historical events database, create a filter-based report in the Report Manager.

 
To do this
Use this display

Step 1 

Select Report Manager from the Reports menu.

Step 2 

Click Add and select Add Filter-based Report Template.

Step 3 

Select the template settings:

Name: the name of the report.

Max results: the number of results displayed in the report. -1 is unlimited results.

Item type: select Events (Historical).

Edit Filter: the filter setting, similar to filters available in the toolbar. See Using Filters, page 5-12.

Report Settings: Report generation options, which are the same as when generating a report from one of the other modules. For more information see Creating Reports, page 5-10.

Variable Parameters: information the user is be prompted to provide when the report is run.

Edit Columns: the columns used in the report. Use the Up and Down buttons to reorder the columns for the report.

Step 4 

Click Save and Close.