06 Oct 2025
04:03 PM
- last edited on
07 Oct 2025
07:45 AM
by
MaciejNeumann
I am trying to understand the format of the display_id field that contains a value preceded by "P-" and followed by a number. Is the number random or is there some logic to it? I can see in my environment that it appears to start with a 2-digit year and 2-digit month, but the data is not consistent with that because I can see display_id values that start with 2509 occurring after ones that start with 2510. Any ideas anyone?
See a sample list attached.
Solved! Go to Solution.
06 Oct 2025 11:54 PM
@Vasan You are right , display_id is generated based on Year + Month + next available number in the sequence. However timestamp is not the right field to look when the problem started , you need to look at event.start field . timestamp field gets updated whenever the problem gets REFRESHED or UPDATED or CLOSED etc.,