Closure of Bulk Alerts

[Aiman_Fathima]

Hello,

Can anyone please suggest on how we can close bulk alerts on XDR. Currently we can only select 100 at a time.

[fmoixsante]

Hi @Aiman_Fathima,

Even though, you have the possibility to resolve alerts from the Alert table, you need to work on the Incidents and close those.

If you are looking at the Alert Table, right-click on an Alert and go to Pivots to views > View related incidents.
You can also add the column Incident ID to the Alert table.

But remember that you need to work from the Incident view and not from the Alert table directly.

[Aiman_Fathima]

Thank you for your suggestion. We tried the above but still they do not get resolved sometimes so was wondering if there are any other methods

[SilviuMihailDascalu]

Hi Aiman,

Can you share a snapshot of the issue you're experiencing?

Thanks,

Silviu

[Aiman_Fathima]

Sorry cannot share the screenshot. The issue is that we have closed the incidents with 'resolve alerts option' but still the alerts are open.