Links

Alert Management

Manage Alerts in the Panther Console

Overview

Panther's Alert Management feature allows you to assign alerts to Panther users, view an activity history of alert updates, and add comments with rich text support from the Panther Console.

How to assign and unassign alerts

A user with the View Alerts permission can assign alerts to Panther users. When an alert is assigned, the user receives an email notification indicating the assignment. The email includes a link to open the alert in the Panther Console.

Assigning alerts

  1. 1.
    Log in to the Panther Console.
  2. 2.
    Click Alerts in the left sidebar.
    • A list of alerts will be displayed.
  3. 3.
    On the right side of an alert in the list, click the Assignee dropdown menu. Select the user you want to assign the alert to.
The Assignee dropdown menu is on the right side of an alert in the Alerts list
You can also assign an alert from the Alert Details page in the Panther Console. While viewing the page, the Assignee dropdown menu is located in the upper right side of the page.
The assignee menu appears in the upper right side of the alert details page

Unassigning alerts

  1. 1.
    Log in to the Panther Console.
  2. 2.
    Click Alerts in the left sidebar.
    • A list of alerts will be displayed.
  3. 3.
    On the right side of an alert in the list, click the Assignee dropdown menu. Select Unassigned from the dropdown.
The Assignee dropdown menu is expanded and there is an option labeled "Unassigned."

Assign multiple alerts at once

  1. 1.
    In the Panther Console, click Alerts in the left sidebar.
  2. 2.
    Check the box next to alerts, or check the box in the upper left corner of the Alerts list to select all alerts.
  3. 3.
    In the upper right corner of the Alerts list, click the Assignee dropdown menu. Select the person who you want to assign the alerts to.
A maximum of one page of alerts can be assigned at once.
Bulk assignment in the Alerts list

Viewing Activity History

  1. 1.
    In the Panther Console, click Alerts in the left sidebar.
  2. 2.
    Click into an alert to view its Alerts Details page.
  3. 3.
    Scroll down to Alert History to view a history of all status changes and comments. The activity is sorted in reverse chronological order, so that the most recent change appears on top.
An alert's Alert History. The example history shows an event that says "A Panther user updated the status to open."
If the status of an assigned alert is changed, the assignee will receive an email notification with details of the change, with a link to open the alert in the Panther Console.

Adding Comments

Users with the Manage Alerts permission can add rich text comments to alerts from the Alerts Details page. Text formatting is supported for bold, italics, lists, code blocks, quote blocks, and hyperlinks. The syntax and formatting output is detailed below:
**Bold** (alternatively: __bold__ OR highlight text + CMD/CTRL+B)
*Italics* (alternatively: _italics_ OR highlight text + CMD/CTRL+I)
- Unordered list
1. Ordered list
```
Code block
```
`Single line code block`
> Quote block
https://panther.com/URL
Rich text formatting in comments
User mentions and modifying or deleting comments are currently unsupported.