Dismissing Risk Events

After you fix the cause of a reported risk or decide that a reported risk doesn't require action, you dismiss the risk event from the Oracle CASB Cloud Service console.

You can later retrieve risk events that were dismissed. Oracle CASB Cloud Service creates an entry in its audit trail for each dismiss action.

1. Select Risk Events from the Navigation menu. If the Navigation Menu is not displayed, click the Navigation Menu icon to display it.
2. Locate the events that you want to dismiss.
3. Dismiss one or more events:

   • To dismiss an individual event, click the drop-down menu in the ACTION column for the event and then select Dismiss.

   • To dismiss multiple events at a time, click the selection check box to the left of the events that you want to dismiss, and then click the Dismiss button at the top of the page.

   • If an event was triggered by a policy alert, you can dismiss all events for the same policy alert at the same time. Click the drop-down menu in the ACTION column for the event, select Dismiss, and then select Dismiss all ... open risk events created by the policy ....

     Note:

     If the number of events dismissed is 100 or more, a job is created on the Jobs page. See Jobs.

   The risk events are dismissed.

4. To find dismissed events on the Risk Events page:
   1. Select Risk Events from the Navigation menu. If the Navigation Menu is not displayed, click the Navigation Menu icon to display it.
   2. In the Status drop-down menu, select Resolved.
5. To run a report of dismissed events:
   1. Select Reports from the Navigation menu. If the Navigation Menu is not displayed, click the Navigation Menu icon to display it.
   2. Select Oracle CASB Cloud Service audit trail.
   3. In the audit trail report, do one of the following:

      • Search the Description column in the report.

      • Export the audit trail to a .csv file, open the .csv file in a spreadsheet, and then search for dismissed events.