This topic describes how to access the Alerts view, details about the Alerts view, and understanding various aspects of alerts. In the Alerts view you can browse through various alerts, filter them, and group them to create incidents.
To access the Alerts view, in the Security Analytics menu, select Incidents > Alerts. The All Alerts view is displayed. You can customize the Alerts view to view alerts as per your requirement.
The Alerts view offers several details and commands to help customize the view and display alerts.
Alerts View Details
The options panel in the All Alerts view displays various parameters that can be used to customize the alert display.
The following table describes the various parameters that you can select to filter the alerts and customize the view. The filter parameters you choose to filter the alerts are persisted and retained when you navigate away from the present view to switch between tabs, sessions or when you navigate to the details screen. The Reset Selection option enables you to reset the filter options to the default value.
The top half of the Alert panel displays the graphical representation of the trend of alerts over time (grouped by each source) that match the filter criteria as per the parameters chosen.
The bottom half of the Alert panel displays the alert details. The following table describes the various alert details.
The bottom half of the Alert panel provides you options to perform various operations. The table describes the various commands available.