Marking the completion of alerts processing

To mark one or multiple alerts as processed:

1. Select the Alerts section in the window of the application web interface.

   This opens the table of alerts.

2. Select the check boxes opposite those alerts that you want to mark as processed.

   You can select all alerts by selecting the check box in the table header.

3. In the pane that appears in the lower part of the window, click the Close alert button.

   This opens the action confirmation window.

   You can also leave a comment that will be displayed in the alert change history.

4. Click Proceed.

The selected alerts will be marked as processed. If the alerts were assigned to other users, they will be marked as processed by you.

You can view all processed alerts by filtering alerts based on the status of their processing by the user.

If an alert based on TAA (IOA), IDS, or URL technology that is similar to a processed alert is received within the day (from 00:00 a.m. to 11:59 p.m.), the application will either create a new alert or update the information about an identical alert with the New or In process status.

Users with the Security auditor role cannot assign and process alerts.