Acknowledge or dismiss an alert

Acknowledge or dismiss an alert

Acknowledge an alert when you or a teammate are handling the incident — the rest of the team sees “acknowledged by you” and stops responding. Dismiss an alert when it is a false positive or no longer actionable. Both actions are logged.

Tip

Hold Shift and click two rows on the Alerts page to select a range, then use Bulk actions → Acknowledge to clear a batch at once.

Procedure

1. Open Alerts from the left nav, or click the bell badge in the top bar.

2. Click the alert row to open its detail panel.

3. Choose an action:
   • Click Acknowledge if the incident is real and you are handling it.
   • Click Dismiss if the alert is a false positive.

4. (Optional) Add a short note explaining the action — useful for shift handovers.

5. The alert moves to the Acknowledged or Dismissed tab and the acknowledger name appears on the row.

Common variations

• When to acknowledge vs dismiss:
  • Acknowledge = real incident, in-progress response.
  • Dismiss = false positive or duplicate. Dismissed alerts do not appear in supervisor response-time stats.
• Bulk acknowledge from the dashboard: the Unacknowledged Alerts widget has an Ack all visible button.
• Reverse an action: open the acknowledged alert and click Un-acknowledge. The action is logged separately.

If this didn’t work

• Acknowledge is greyed out — the alert is already acknowledged by someone else. Hover to see who.
• Alert reappears after acknowledgement — the rule re-fired within the cooldown window. See Alerts fire too often.

Related

• Alert rules — cooldown, schedule, and scope fields
• Alert response metrics — how acknowledgement feeds the supervisor dashboard
• Review an event — every alert links to its triggering event