- Get Started with Threat Center
- Threat Center
- Threat Center Permissions
- Threat Center Alerts: Read
- Threat Center Alerts: Read, Write, and Delete
- Threat Center Cases: Read
- Threat Center Cases: Read, Write, and Delete
- Threat Center Detection Grouping Rules: Read
- Threat Center Detection Grouping Rules: Read, Write, and Delete
- Threat Center Watchlist: Read
- Threat Center Watchlist: Read, Write, and Delete
- Threat Center Cases
- Threat Center Alerts
- Threat Center Detections
- Threat Center Risk Score
- Monitor Entities of Interest in Threat Center
- Group Detections
- Work on Cases
- Work on Alerts
- Edit and Collaborate in Threat Center
- Use Automation Tools in Threat Center
- Find Cases and Alerts
- Sort Cases or Alerts
- Filter Cases or Alerts
- Search for Cases or Alerts in Threat Center
- Build a Search in Threat Center
- Enter a Search Using Exabeam Query Language in Threat Center
- Enter a Search Using Natural Language in Threat Center
- Run a Recent Search in Threat Center
- Create a New Saved Search in Threat Center
- Run a Saved Search in Threat Center
- Edit a Saved Search in Threat Center
- Delete a Saved Search in Threat Center
- View Case and Alert Metrics
- Get Notified About Threat Center
- Threat Center APIs
Dismiss Alerts
Indicate an alert has been reviewed and doesn't need to be reviewed again.
You can dismiss an individual alert or multiple alerts at once. You can view whether an alert has been dismissed in the Alerts tab, under the STATUS column.
Dismissed alerts are automatically reverted to unread status when their risk scores increase by a percentage you specify. By default, the percentage is 10 percent. Specify a different percentage under Threat Center settings.
Dismiss an Individual Alert
In an alert, click Dismiss.
(Optional) In Provide a supporting reason to dismiss alerts, enter the reason why you're dismissing the alert. To better communicate your message, you can also format the text.
Click Dismiss.
The dismissed reason appears In the alert Overview tab under Dismissed., who dismissed the alert, and the date and time they dismissed alert.
This action is recorded in the alert or case history.
Dismiss Multiple Alerts
In the Alerts tab, select alerts to dismiss:
To dismiss all alerts shown, select the checkbox in the header row, then click Dismiss.
To dismiss multiple alerts, select the checkbox for the alerts you're dismissing, then click Dismiss.
(Optional) In Provide a supporting reason to dismiss alerts, enter the reason why you're dismissing the alert. To better communicate your message, you can also format the text.
Click Dismiss.
The dismissed reason appears In the alert Overview tab under Dismissed., who dismissed the alert, and the date and time they dismissed alert.
This action is recorded in the alert or case history.