Carbon Black Cloud: How to Undismiss Alerts

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Describe how to remove alerts from dismissed or dismissed and suppressed states. 

Environment

• Carbon Black Cloud Console: All Versions (formerly PSC Console)

Resolution

1. Navigate to the alerts page by selecting "Alerts" from the left hand menu.
2. Search for the desired alert.  Ensure that the "Dismissed" filter under the "Workflow" section of the filters pane is selected when conducting this search.
3. Select the drop down option at the far right hand side of the alert row, next to the investigate button.  From the menu, select the option to undismiss.

Additional Information

Undismissing an alert will also prevent future alerts from being suppressed if this option was checked at the time the alert was dismissed.