Alert Investigation

Alert Investigation helps you understand why an alert fired by linking one alert log entry to live Market Risk and Scenario Risk context in a single workspace.

Open it from the sidebar: Alerts → Alert Investigation.

Browser title: Rival Risk - Alert Investigation.

Related articles: Creating and Managing Alerts · Market Risk Overview · Run Scenarios · Working with Grids · Navigation

Use this page when you need to:

- Review recent alert firings in the Alert Log 

- Jump from a specific log row into the related Market Risk book 

- Run or refresh a Scenario Risk slide in the same context 

- Compare live risk and scenario results without leaving the alerts workflow 

If you only need to create or edit alert definitions, use Alert Setup instead.

> Screenshot: Full Alert Investigation layout with all three panes visible.

From the sidebar

1. Expand Alerts. 

2. Click Alert Investigation.

From Alert Setup

1. Open Alerts → Alert Setup. 

2. In the bottom log pane, double-click a row (*Double-click a row to investigate*). 

3. Alert Investigation opens (or focuses an existing Investigation window) with that log already linked when possible.

> Tip: Enable Open navigation links in new tab in Settings if you want Setup and Investigation side by side. See [Navigation](#).

> Screenshot: Alert Setup log pane double-click opening Investigation.

Alert Investigation is a three-pane workspace:

| Pane | Title in bar | Role |

|---|---|---|

| Left | Alert Log | History of firings; choose which event to investigate |

| Upper right | Market Risk | Live risk grid linked to the selected log |

| Lower right | Scenario Risk | Scenario / slide grid linked to the selected log |

Resize panes

- Drag the vertical splitter between Alert Log and the right side. 

- Drag the horizontal splitter between Market Risk and Scenario Risk. 

- Splitter tooltip: Drag to resize. 

- Your split sizes are remembered for later sessions.

While you drag a splitter, pane interaction pauses briefly so grids don’t steal the drag.

> Screenshot: Annotated three-pane layout with splitters highlighted.

The left pane is titled Alert Log.

Idle vs linked state

| State | Subtitle example |

|---|---|

| Nothing linked yet | Double-click a row to view details |

| Log linked | Linked #12345 (log ID) |

Browse the log

1. Wait for the pane wait overlay to clear (connection/data loading). 

2. Sort or filter columns as needed. 

3. Use paging controls in the pane bar when multiple pages exist. 

4. Clear filters with the filter badge when you want the full list again.

Grid skills (filter, sort, Column Chooser): [Working with Grids](#).

Select a log to investigate

1. Confirm the app is Connected. 

2. Double-click the log row you want. 

3. The Alert Log subtitle updates to Linked #…. 

4. Market Risk and Scenario Risk refresh for that log context.

Severity highlighting

Some log rows show severity colors. A single click on a row can clear that row’s severity highlight in your current session (visual acknowledgement). This does not delete the log entry.

Double-click still links the row even if you clicked first.

> Screenshot: Alert Log idle subtitle. 

> Screenshot: Alert Log after link showing Linked #ID.

The upper-right pane is titled Market Risk.

| State | Subtitle |

|---|---|

| Default | Alert Investigation |

| After a log link | Linked log #12345 |

What linking does

When you double-click an Alert Log row:

- The Market Risk pane requests the linked live context for that log 

- Prior column filters in this pane are cleared so you start from the linked view 

- The grid updates to the accounts/products associated with the alert event (as provided by the server)

Tools in this pane

- Quick filter (natural-language style search in the pane bar) 

- Column filters, filter badge, paging 

- Standard grid interactions (sort, resize, Column Chooser where available)

If your search/filters hide everything, you may see:

> No results found matching your search criteria.

Clear filters or Quick filter, then try again.

> Screenshot: Market Risk pane with Linked log # subtitle and live grid.

The lower-right pane is titled Scenario Risk, with subtitle Alert Investigation.

What linking does

The same Alert Log double-click also links this pane so scenario analysis can run in the alert’s context.

Run a scenario here

Typical controls mirror Run Scenarios (availability depends on connection and template list):

1. Choose a Template (including _Default_ when listed). 

2. Optionally open Manage Templates to maintain templates. 

3. Click Run Slide. 

4. Review results in the Scenario Risk grid.

For full scenario options (model time, open/day filters, heatmap, charts), you can also use the main Scenario Risk → Run Scenarios page. See Run Scenarios and Scenario Templates.

> Screenshot: Scenario Risk pane with Run Slide and template controls.

1. Open Alert Investigation (or arrive from Alert Setup via log double-click). 

2. Confirm sidebar / pane connection is healthy (**Connected**). 

3. In Alert Log, find the firing (filter by alert name, time, or severity if helpful). 

4. Double-click the row. 

5. Confirm:

   - Alert Log shows Linked #… 

   - Market Risk shows Linked log #… 

6. Inspect the Market Risk grid for the books/symbols that drove the alert. 

7. In Scenario Risk, select a template and click Run Slide if you need stress/scenario context. 

8. Resize panes so the view you care about most has room. 

9. If you need to change the alert definition, go to Alert Setup, edit the alert, and save.

> Screenshot: All three panes populated after a successful link.

Each pane bar can show a small status indicator when that pane is not fully connected:

| Status | Meaning |

|---|---|

| Connecting… | Pane is establishing its session |

| Disconnected | Not connected; data may be stale or unavailable |

| Connection error | Failed to connect; check server / retry |

The main sidebar connection status is still the best first check for overall app connectivity. See [Navigation](#).

If a link was requested while disconnected, Investigation retries linking when the pane reconnects when possible.

“Why did this critical alert fire?”

1. Filter Alert Log to recent Critical rows (if severity is a column). 

2. Double-click the newest row. 

3. In Market Risk, identify which account/symbol is outside limits. 

4. Run a relevant scenario template in Scenario Risk. 

5. Decide whether to widen limits, hedge, or adjust the alert in Alert Setup.

“Compare two firings”

1. Double-click the first log; note Linked # and inspect Market Risk. 

2. Double-click the second log; panes relink to the new ID. 

3. Optionally keep Alert Setup open in another window for definition edits.

“Alert Setup → deep dive”

1. From Alert Setup, double-click the log row. 

2. Investigation opens already linked. 

3. Focus Market Risk first; use Scenario Risk only if scenario context is needed.

| Symptom | What to try |

|---|---|

| Double-click does nothing | Wait until Connected; wait for pane wait overlay to clear; try again |

| Subtitle never shows Linked # | Confirm you double-clicked a data row (not a header); check connection |

| Market Risk empty after link | Clear Quick filter / column filters; confirm the alert still has valid account/product scope |

| “No results found matching your search criteria” | Clear filters in the Market Risk pane |

| Scenario Risk blank | Link a log first; ensure Connected; click Run Slide after choosing a template |

| Panes feel stuck while resizing | Finish the drag (mouse up); interaction returns when resizing ends |

| Opened from Setup but nothing linked | Open Investigation and double-click the log again |

| Need the alert definition | Use Alert Setup (double-click the alert definition row there, not the log) |

| I want to… | Do this |

|---|---|

| Open Investigation | Sidebar → Alerts → Alert Investigation |

| Open from Setup | Alert Setup log pane → double-click row |

| Link Live + Scenario | Alert Log → double-click row |

| See what is linked | Look for Linked #… / Linked log #… |

| Resize layout | Drag vertical or horizontal splitter |

| Filter the log | Column filters / paging in Alert Log |

| Inspect live risk | Use Market Risk pane after linking |

| Run a scenario | Scenario Risk → template → Run Slide |

| Edit the alert rule | Alert Setup |

- Creating and Managing Alerts

- Symbol Specific Alerts

- Market Risk Overview 

- Run Scenarios

- Scenario Templates 

- Working with Grids 

- Navigation

## Screenshot checklist (for authors)

1. Full three-pane Investigation page 

2. Vertical + horizontal splitters (hover/active) 

3. Alert Log idle: Double-click a row to view details 

4. Alert Log linked: Linked #… 

5. Market Risk with Linked log #… 

6. Scenario Risk with Run Slide / Template 

7. Entry from Alert Setup log double-click 

8. Pane connection indicator (optional) 

9. Empty/no-results state in Market Risk 

10. Severity-colored log row before/after click (optional)

Replace # related-article links with live riskdocs URLs when those articles are published.