Operator phase 3: Close an alert
-
- UpdatedAug 1, 2024
- 4 minutes to read
- Xanadu
- Event Management
After you take action on an alert, you can verify several items on the alert and then close it.
Before you begin
Phase 1 |
||
Phase 2 |
||
Phase 3 |
Close an alert |
Role required: evt_mgmt_operator
About this task
Procedure
What to do next
- Reopen an alert
- If you think an alert requires further action, you can manually change
its state to Reopen. When an alert reopens, any
associated incidents can also be updated or reopened according to the
incident state and the rules that your administrator configured.
Note: Any time you reopen an alert, always go through the triage and close phases again.
- Work with alerts in the flapping state
In some cases, the same event that created the alert you just closed could be triggered again, even repeatedly, in a short amount of time. If this occurs, the State of the alert that you just closed changes to Reopen, and eventually to Flapping depending on settings that your administrator configures.
See Handle alerts in the flapping state for more information on what to look for.
For a summary of other tasks that you might need to perform at some time, see Advanced tasks for the Event Management operator.