Reporting: Investigate an Alert

Document created by RSA Information Design and Development Employee on Sep 14, 2017Last modified by RSA Information Design and Development Employee on Jun 24, 2020
Version 18Show Document
  • View in full screen mode

You can investigate every alert that is triggered on the Alert View. For more detailed investigation on a particular alert, you can view the alert on the Investigation module.

To investigate an alert:

  1. In the Alert section toolbar, click View Alerts to navigate to the View Alerts view.
  2. Do one of the following:
    • Click the  button against the alert you want to investigate. 
      The Investigation module displays the details of the first session that registered the match for the given alert  for immediate analysis.
    • Click on the alert name of the alert you want to investigate.
      The Investigation module displays all matches for that particular alert for the hour surrounding the registered alert.
Previous Topic:View an Alert
You are here
Table of Contents > Working with Alerts > Investigate an Alert