In the 'Anomalies global settings' you will be able to change the report parameters, intervals for removing old incidents and incidents colors. By clicking on any incident you can select its reporting by email. Incidents can be reported to two email addresses, the first one is for internal network incidents and the second one is for external network incidents.
You may also specify email subject (i.e. Network incident %INC - directive %INC is replaced by incident number), email body, header and tail. Maximum size of email is 256 characters (including incident detail text).
The incident removal option allows you to choose interval for old incidents removal. The first option 'clean new incidents' specifies interval for the new incidents removal. 'Clean new incidents' value is in interval 1-91 days. The second option 'clean other incidents' specifies the interval for removing any other incident state instead of 'archive' state. 'Clean other incidents' value is in the range of 1-200 days.
The next, very helpful, feature for incident marking allows you to choose the incident colors. Network anomaly detection software uses 5 severities: critical, urgent, important, warning and informational. You may select a color for any severity. Color is defined as six hex digits (RGB format so called red-green-blue format). Some examples of color codes: red - FF0000, green - 00FF00, blue - 0000FF, cyan - 00FFFF, magenta - FF00FF, yellow - FFFF00 etc.