Use this procedure to open an alert and to open all related alerts.

Procedure

  1. On the left navigation pane, click Alerts.
  2. Choose Group by: None.
  3. Click the alert you want to close.
  4. In the Actions column, click the dropdown menu.
  5. Click Open.
    The Open Alert window displays.
  6. In the Manage Related Alerts section, choose whether to:
    • Open all existing alerts with the same threat ID
    • Automatically open all future alerts with the same threat ID
    Note: Click View Alerts to view all alerts with the same threat ID.
  7. Add a note to other users outlining the reason opening the alert, and all future alerts if applicable.
  8. Click Open Alert.

Results

The workflow status of the alert changes to Open. The change is recorded in the Alert ID History pane. Use the Alert ID History pane to view all previous changes to the workflow status of the alert.