Prisma SD-WAN generates incidents and alerts when the system reaches system-defined or customer-defined thresholds or there is a fault in the system. Use these incidents and alerts to troubleshoot the system.

Select Incidents and AlertsPrisma SD-WAN to view incidents and alerts in Strata Cloud Manager.

Use the following tabs to navigate through incidents and alerts in Prisma SD-WAN.

View incidents and alerts and their categories in Prisma SD-WAN. The Overview tab is your default view.

View the top incidents and alerts which display the following information.

Type of Incident	Displays the category of the incident.
Description	Displays the description of the incident.
Severity	Displays the severity of the incident.
Priority	Displays the priority of the incident.
Correlated Alerts	Displays the number of incidents aggregated in this incident.
Status	Displays the status of the incident.
Created	Displays when the incident was raised by the system.
Last Updated	Displays when the incident was last updated by the system.

An incident is an indication of a fault in the system. Incidents are raised and cleared and vary in severity:

• Critical—Whole or part of a network is down and requires immediate action.
• Warning—Impacts the network and needs immediate attention.
• Informational—Network is degraded and needs attention soon.

An alert may or may not be an indication of a fault in the network. An alert is raised when the system reaches system-defined or customer-defined thresholds.

Use the Settings tab to create incident policies to manage event code suppression based on the specified classifications and action attributes configured. You can use incident policy rules to suppress or escalate incidents that arise during a scheduled time period. In addition, you can also change the default priority of system generated incidents to a priority level that is more aligned with your business requirements.