Introduction to Events, Tickets, and Alerts

Events, Tickets, and Alerts are different statistics used in Barracuda XDR. It's useful to understand the difference between the three terms.

An Event is a single, observable item in a monitored data source, such as a packet or token, aka the "raw data".

A Ticket is an Alert that has been escalated to a customer/MSP.

An Alert is a pattern of activity that implies a potential risk. An alarm could indicate an identified threat to an information system, violate acceptable use policies, or the circumvention of standard security practices.