Viewing alerts in the Console

The default view groups alerts into Incidents — collections of alerts that have been correlated together.

Clicking on an incident will expand into a list of alerts.!

You can use substring matches to limit results.

Or match on the underlying API data via SQL operations.

(Read more about this feature by clicking on the “Learn about filters” link in the filter bar.)

To clear out multiple alerts at once, you can check the alert or incident and click “Resolve”.

To resolve all alerts under the current filter at once, you can select “All” alerts in the top-level checkbox dropdown. Then click “Resolve”.

You will be prompted to confirm before continuing.