View related events and alerts in security incidents As a security incident is being worked on, it is sometimes useful to view events and alerts associated with the resources (CIs) affected by the security incident. For events received, you can view the details of the events. For alerts, you can view and acknowledge these alerts, and create incidents or security incidents from them as needed. Before you begin You must have the Security Incident Response Event Management support plugin activated. Role required: si.sn_agent Procedure Navigate to any security incident list (for example, Security Incident > Incidents > Unassigned Incidents). If the resources affected by the security incident you are viewing have received alerts or events within the previous 24 hours, one or both of the following related lists appear. Security Incident CI Alerts Security Incident CI Events Click the related list you want to view. Related list Description Security Incident CI Alerts You can view details for alerts received within the previous 24 hours, and you have the option of clicking Acknowledge to indicate that you are aware of the alert and it is being handled, or Close to indicate that the alert is not important. Security Incident CI Events You can view details for event received within the previous 24 hours.