Viewing Alerts in Activity Forensics

To view alert rules or alert severity, go to Forensics > Activity and select Alert Rules Name or Alert Severity from the filter dropdown list. Once one is selected, continue providing the parameters to the filter.

Enable Show Alerts Only to view alerts only.

Generating an Alerts Report

You can generate an ad-hoc or scheduled report for an alert rule by selecting Generate Report on the Activity Forensics page.

This can be used as a log for audits and compliance reporting or used by a security team to review medium and low severity alerts from Data Access Security.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.