Skip Navigation

Mark alerts as reviewed or not reviewed

Reviewing is a
per alert
action, not a
per person
action. Only one person needs to review an alert for it to be marked as reviewed in the system. If another operator reviews an alert, their review is reflected on your screen. If you mark an alert as reviewed, that action will be reflected on the screens of the other operators.
  1. In the navigation bar, click
    Alerts
    >
    Inbox
    . The Inbox opens, showing all incoming alerts in the system.
  2. In the
    Inbox
    , locate the alert whose review status you want to change. If the list is extensive, you can narrow it down by filtering for alerts that are not reviewed yet or that have been reviewed already. For details on how to filter the list, see Run an advanced search for an incoming alert.
  3. Click the name of the alert. The details of the alert appear in the right pane.
  4. Click
    Mark as Reviewed
    or
    Mark as Not Reviewed
    at the top of the details section.
The review status of the event is updated. Your identity and the time you made the update are recorded and displayed in the event details section below the source name field.