Alert Status
The alert list displays sufficient information for you to recognize an event's current state quickly. Each alerts state depends on multiple factors:
Severity
Priority
Sub status
Manager
The status of an alert provides basic information about the alert response activity. The following table lists the alert status:
Open Alerts: New alerts needing immediate attention.
In Progress Alerts: Alerts actively being worked on.
Resolved Alerts: Alerts with identified solutions.
On Hold Alerts: Temporarily paused alerts under review.
Closed Alerts: Fully resolved and closed alerts.
Total Alerts: The comprehensive metric of all alerts.
Severity
Each alert has a severity level associated with it and indicates the seriousness of the alert. In combination with status and priority, the severity level indicates the urgency of the need to take action. The following table lists the default severity levels and colors for the alert that appear in the alert list.
Icon | colour | Level |
|---|---|---|
| Red | Critical |
| Dark orange | Major |
| Light Orange | Minor |
| Yellow | Warning |
| Blue | Information |
| Teal | Unknown |
Priority
In addition to a severity level, each event has a priority level. Distinguishing between severity and priority helps you to understand which event requires action first.
Icon | Priority |
|---|---|
| Highest |
| High |
| Medium |
| Low |
| Unknown |
Sub status
Tracking the lifecycle of an alert is simplified through sub-status indicators such as Assigned, Fixed, Work in Progress, and more. These sub-statuses offer insights into the progress and resolution of alerts, aiding in effective monitoring and management.
Manager
The inclusion of the Alert Manager Filter ensures a seamless organization of alerts based on their originating systems. For IPM Alerts, the assigned manager is IPM, and for OC Alerts, the designated manager is OC, and Other managers are the alerts ingested from external sources. This filter streamlines the management process by categorizing alerts according to their origin.