Review and acknowledge alerts
Understand an alert before marking it reviewed.
Open Alerts to read the event description, device, time and acknowledgement state. Use Refresh workspace when you need a current server view.
Confirm an unexpected event against the device inventory and agent timestamps. A new or unfamiliar device is not automatically malicious, and an offline event can reflect power saving or a network interruption.
Operator, Administrator and Owner roles can acknowledge an alert. Acknowledgement records review; it does not repair a device, suppress all future events, delete evidence or change network access.
Push notifications are a convenience for noticing events. Always use the console and your organization’s established process for decisions requiring reliable monitoring.