Resolving an Alert

Each new alert is unresolved by default. An alert is marked as resolved and moved to a resolved state if:

• The issue can no longer be detected by the rule.

• The detection is based on activities, and 30 days have passed since the original detection. Alerts automatically resolve after 30 days.

• After reviewing the alert, you determine it is not of concern, and click Mark as False Positive.