How to Reopen an Alert#
This topic provides step-by-step instructions for reopening an alert in TheHive.
Use this procedure to reopen a closed alert and change its status so that it moves from the Closed stage to the In progress stage.
Required permissions
Only users with the manageAlert/reopen permission can restart investigating a closed alert in TheHive.
Procedure
-
Find the alert you want to reopen.
-
In the alert, select Restart.
-
In the Change the alert status drawer, update the status for the alert, complete the analysis, and assign it to someone else if needed.
-
Select Confirm.