1 Reply Latest reply on Dec 5, 2014 4:46 AM by markie_mark

    Reporting on events "reviewed"

    infosec_wizard

      Does anyone know of a way to report on events that have been "reviewed"? I know you can mark events as reviewed on an event drill down, so it's obviously flagging them somewhere, but I cannot seem to find a way to report on it. Anyone have any ideas? I already know I can add the events to a case and then report on the status of that case, but just thought it would be handy to be able to report on the events reviewed portion as well.

       

       

       

       

      Thanks,