Arctera Data Insight Administrator's Guide

To manage alerts

1. In the Console, click the Policies tab.

   The Alerts tab display by default. On the tab, you can view all the alerts that were generated by Data Insight.

2. In the Alerts Summary, click the drop-down arrow on any column header and select Columns. Then, select the parameters you want to show or hide. You can sort by:

   • The name of the policy.

   • The severity of the alert.

   • The type of policy associated with the alert - Data Activity Trigger, User Activity Deviation, Real-time Permitted User-based Activity, Real-time Restricted User-based Activity, or Real-time Sensitive Data Activity.

   • The name of the user account that violated the policy.

   • The date on which the alert was generated.

   • The resolution, if any, taken in response to the alert.

3. To send alerts in email, select the alerts and click Send Email.
4. Enter the email addresses and click Send.
5. To enter the resolution for an alert, select the alert, click in the Resolution column for the alert and type in the resolution.

   To update the resolution for multiple alerts, select the alerts and click Update Resolution at the top of the summary table.

To delete alerts

• To delete an alert, select an alert and click Delete.

  To delete alerts by severity, click Delete and select the severity. This deletes all alerts that match the selected severity.

  To delete alerts older than a certain date, click Delete and select the date at the top of the table.

  Note:

  You can configure automatic deletion of alerts older than the specified interval on the Data Retention screen. However, you cannot restore the alerts once they are deleted. Alerts are also automatically published to the Windows event log.

  See Configuring data retention settings.