Skip to content

How to Change an Alert Status#

This topic provides step-by-step instructions for changing the status of an alert in TheHive.

Required permissions

Only users with the manageAlert/update or manageAlert/reopen permissions can change an alert status in TheHive.

Procedure

  1. Find the alert you want to update.

  2. In the alert description, move through the Status section in the left panel.

    Status

  3. Select the new status from the dropdown list.

    Can't find a status?

    If you can't find the status you need, it may be due to one of the following reasons:
    - The status isn't available from the alert description page. Statuses linked to the In progress stage are available only when starting work on an alert. Statuses linked to the Closed stage are available only when closing an alert.
    - The status doesn't exist yet, or someone may have deleted or hidden it. Contact someone with admin-level permissions to create it or restore it.

  4. Select Save.

Next steps