Viewing the alert table

The alert table is displayed in the Monitoring & reporting → Alerts section and provides you with an overview of all alerts registered by Open Single Management Platform. By default, the table displays the alerts related to all of the tenants to which you have access rights. If necessary, you can configure the alert table.

To configure the alert table, do any of the following:

Apply tenant filter:
1. Click the link next to the Tenant filter setting.
  The tenant filter opens.
2. Select the check boxes next to the required tenants.
Filter the data of the alerts table:
1. Click the filter () icon.
2. On the Filters tab, specify and apply the filter criterion in the invoked menu.
If you want to hide or display a column, click the settings () icon, and then select the necessary column.

The alert table is configured and displays the data you need.

The alert table has the following columns:

Alert ID. The unique identifier of an alert.
Registered. The date and time when the alert was added to the alert table.
Updated. The date and time of the last change from the alert history.
Status. The current status of the alert.
Assigned to. The current assignee of the alert.
Tenant. The name of the tenant in which the alert was detected.
Rules. The IOC or IOA rules that were triggered to detect the alert.
Affected assets. The devices and users that were affected by the alert.
Number of assets. Total number of affected assets.
Observables. Detection artifacts, for example IP addresses or MD5 hashes of files.
Number of observables. Total number of detection artifacts.
Incident link type. Way to add an alert to an incident.
Severity. Severity of the alert.
Name. The name of the alert.
Status changed. The date and time of the last alert status change.