Modifying the status of VIP alerts

Users with the Senior security officer role can assign the VIP status to alerts or clear the VIP status of alerts.

To toggle the VIP status for alerts:

1. Select the Alerts section in the window of the application web interface.

   This opens the table of alerts.

2. Select the check boxes for alerts for which you want to change the VIP status.

   You can select all alerts by selecting the check box in the table header.

3. Do one of the following:
   • If you want to mark alerts as VIP, click the Mark as VIP button in the pane that appears in the lower part of the window.
   • If you want to remove the VIP status from alerts, in the pane that appears in the lower part of the window, in the Mark as VIP drop-down list, select Mark as non-VIP.

   This opens the action confirmation window.

   You can also leave a comment that will be displayed in the alert change history.

4. Click Proceed.

The VIP status of alerts is changed.

Users with the Senior security officer and Security auditor roles can view all events with the VIP status by filtering alerts by VIP status.