Creating incident notification

This article will explain how the event and incident are generated. The logic will apply to Guardian platform.

Keywords

Detection - a single moment (typically 1 sec) where the probability of chainsaw sound is above a threshold from a single guardian

Event - a collection of detections over a period of time (typically minutes to hours) from a single guardian (e.g. chainsaws were detected between 15:35 and 17:10)

Response - a report submitted via the Ranger app detailing what was discovered- Which Guardian/Site was investigated and when?- What was discovered? Nothing vs evidence of logging vs meet the loggers- What was the sophistication of the logging operation? Large scale vs farmers- What was the action taken? Reprimand vs confiscation vs none

Incident - a sequence of events and responses (for a site) that enables the measurement of response time and the characterisation of the event (e.g. type, scale, sophistication, action taken - see metrics below). Creation of incident happens upon 1st event. - can consist of 1 or more events and/or 1 or more responses - can be grouped manually in the case of the control group

How event gets created?

In order to get the event created, there has to be at least 20 detections of score 0.9 or higher. For example, if the Guardian detects the chainsaw sound, the system will use the detected sound (detection) to calculate the score. If the score is lower than 0.9 then this detection does not count as 1 for generating the chainsaw event. The detection must have score 0.9 or higher to be counted for generating the chainsaw event. The system will repeat calculating the detections until the detections score 0.9 or higher is collected to 20 of them, so the chainsaw event will get created. 

Note: An event can last until there is no new detection (score minimum 0.9) for 1 hour

When the system collects up to 20 detections, it will send the notification of event to the Guardian app. The event will be created in the incident and continue adding to the same incident up to 7 days from the first event. After that the event will be created in the new incident.

If there are responses to the incident, the 1st response will be added into the incident. Additional response will be added to the same incident only the additional response is within 24 hours from the 1st response. In case of the additional response is after 24 hours from the 1st response, it will be added to the new incident even though the new incident does not have any event.

You can close the incident after it is responded and it will show username, date and time of closing the incident on the dashboard. See more about guardian dashboard.