Close Alerts

Use this procedure to close an alert and to close all related alerts.

Procedure

1. On the left navigation pane, click Alerts.
2. Choose Group by: None.
3. Click the alert you want to close.
4. In the Actions column, click the dropdown menu.
5. Click Close.
   The Close Alert window displays.
6. Click the Close As drop-down menu to select a reason for closing the alert:
   • Resolved
   • No reason
   • Resolved - Benign/Known good
   • Duplicate/Cleanup
   • Other
7. In the Manage Related Alerts section, choose whether to:
   • Close all existing alerts with the same threat ID
   • Automatically close all future alerts with the same threat ID

   Note: Click View Alerts to view all alerts with the same threat ID.
8. Add a note to other users outlining the reason closing the alert, and all future alerts if applicable.
9. Click Close Alert.

Results

The workflow status of the alert changes to Closed. The change is recorded in the Alert ID History pane. Use the Alert ID History pane to view all previous changes to the workflow status of the alert.