To mark an alert as In Progress, perform the following procedure.

Procedure

  1. On the left navigation pane, click Alerts.
  2. Select Group by: None.
  3. Select the alert.
  4. In the Actions column, click the dropdown menu.
  5. Click Mark In Progress.
    The Mark Alert In Progress dialog displays.
  6. Click the + next to Manage Related Alerts.
    Mark in Progress dialog
  7. Choose whether to mark all alerts that have the same threat ID as In Progress.
    Note: Click View # Alerts to view all alerts with the same threat ID.
  8. Click OK.

Results

The workflow status of the alert changes to In Progress. The change is recorded in the Alert ID History section of the Alert Details pane.