> For the complete documentation index, see [llms.txt](https://help.security.gallagher.com/smb/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.security.gallagher.com/smb/smb-app/activity-and-incident-management/site-activity.md).
# Activity Overview
The **Activity** page is split into two tabs, **Events** and **Incidents**, and provides details of what activity has happened on a site. The **Activity** page can be accessed from anywhere in the app by clicking the **Activity** button on the navigation bar at the bottom of the screen.
***
{% tabs %}
{% tab title="EVENTS" %}
The **EVENTS** tab shows a log of all the arming and disarming activity and all events related to access control, including access granted and access denied. Events are logged showing what type of action occurred, by whom, at what reader or door, and when.
**Filter** events based on required timeframe; 24 Hours, 7 Days, 30 Days, or Custom. Events from the past 24 hours are displayed by default.
Events can be **exported** and sent as a CSV file via email. The report data is based on what filters are currently applied. If no filter is applied, it will send the past 24 hours of events.
{% endtab %}
{% tab title="INCIDENTS" %}
The **INCIDENTS** tab shows details of all previous intruder alarm and system alarm activations.
An **incident** is a real-time timeline of activity following an alarm activation. An incident shows which sensors have activated at your site, any other alarms that have occurred, and when each happened. The incident will also show any response to the incident by a Site Manager. If an alarm at your site is activated, the Site Managers will receive a push notification on their phone saying which sensor was activated. Opening the notification will take you directly to the incident, or if you don’t click on the notification then an incident banner also appears on the home screen of the SMB app.
**System alarms** occur if there is an issue with the system, such as a power failure or a low battery alarm. They display information about Controller offline, low battery, and input tamper alarms. When a system alarm is raised, Site Managers are notified and an incident is created. If a system alarm is generated, Site Managers will receive a push notification on their phone stating there is an issue. Opening this notification will take you directly to the incident details. An incident banner also appears on the home screen of the SMB app.
{% endtab %}
{% endtabs %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://help.security.gallagher.com/smb/smb-app/activity-and-incident-management/site-activity.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.