3.4.6 Events

This topic displays the list of events along with their details in the Alert in the following components:
  • List Type
  • Event Type
  • Matched Rule Name
  • Watch List Primary Name
  • Watch List ID
  • Event ID
  • Match Score
  • Risk Score
  • Edit Comments Icon

Click on the Select All check box to select all the event records for the bulk update. The Select All option is configurable. To enable and disable Select All option, see the Application Level Configuration section in OFS Customer Screening Administration Guide.

To Customize the number events records displayed per page in the event table, enter the number in the Records Per Page entry box. The value must be between 5 and 100.

You can click the Expand button to expand the event page and view the event records (Records per Page) simultaneously. Click on the Collapse button to collapse the event record. You can save the preference by clicking the Save Save icon and click the Clear Clear icon for the default view.

Click on Match Details to display all the matched parameters of the event listed in the events table.

Search Filters

You can use the search filter in the top middle of the page to filter the events in the Alert with the Match Score/Risk Score criteria. Follow these steps to filter the events:
  • Enter the value in the Search Filter.
  • From the Filter menu, select the Match Score/Risk Score.
  • Click the Sort Sort icon to sort the search criteria in ascending and descending order.

    You can perform the following actions on the Events.

Adding Comments to an Event

You must enter comments for an alert. Follow these steps to add a comment:
  1. In the Events section, click the Comments Comments icon. The Add Comments window is displayed.
  2. In the Standard Comments section, select one or more Standard Comments from the drop-down list.
  3. In the Comments section, enter your comments and click Save.
  4. Click the Comments Comments icon in an Event to edit a comment and click Save.

Adding False Positive to an Event

If the Analyst/Supervisor identifies the event as clean, he can add the False Positive status to the event on the fly.
  1. Click the False Positive False Positive icon next to the Risk Score. The Add Comments window is displayed.
  2. In the Standard Comments section, select one or more Standard Comments from the drop-down list.
  3. In the Comments section, enter your comments and click Save. The event will be marked with False Positive.

Adding True Positive to an Event

If the Analyst/Supervisor identifies the event as clean, he can add the True Positive status to the event on the fly.
  1. Click the True Positive True Positive icon next to the Risk Score. The Add Comments window is displayed.
  2. In the Standard Comments section, select one or more Standard Comments from the drop-down list.
  3. In the Comments section, enter your comments and click Save. The event will be marked with True Positive.

    Note:

    In the CS_APPLN_PARAMS table, the PARAMETER_NAME is MANDATORY_EVENT_COMM. By default, this PARAMETER_VALUE is “N”.

    If no comments are given in the comments section for this configuration at the event level for any alert, it will not display any message and the empty message will be saved.

    If you change the PARAMETER_VALUE for MANDATORY_EVENT_COMM to “Y” and no comments are given in the comments section for this configuration at the event level for any alert, the message “Please enter event level comments!” will be displayed and will not allow to save until the comments are provided.

    In the CS_APPLN_PARAMS table, the PARAMETER_NAME is MANDATORY_ALERT_COMM. By default, this PARAMETER_VALUE is “Y”.

    If no comments are given in the comments section for this configuration at the alert level for any alert, it will display “Please enter Alert level comments!” message and will not allow to save until the comments are provided.

    If you change the PARAMETER_VALUE for MANDATORY_ALERT_COMM to “N” and no comments are given in the comments section for this configuration at the alert level for any alert, it will not display any message and the empty message will be saved.

Bulk Update the Events

You can bulk update the status of the Events in the Alert. Follow these steps to Bulk update the status:
  1. In the Events section, select one or more events or click Select All check box.
  2. In the top right corner of the Events section, select the Bulk Update drop-down list and then select True Positive/False Positivestatus. The Add Comments window is displayed.
  3. Enter the comments and click Save. For more information, see Adding Comments to an Event.
  4. The status of the event will be updated. The Decision and Comment are added to the Audit History of that Alert.

Exporting Event Details

Once you click the export icon, the event details of the alert is exported into excel.

Figure 3-21 Exporting Event Details


Description of Figure 3-21 follows
Description of "Figure 3-21 Exporting Event Details"

Below is the list of columns that are available for Event export:

  • Alert ID
  • Screening Type
  • Entity Type
  • Jurisdiction
  • Business Domain
  • Event ID
  • Customer/External Entity ID
  • Given Names
  • Family Name
  • Full Name
  • Source Request ID
  • Date of Birth
  • Primary Citizenship Code
  • Secondary Citizenship Code
  • Residency Country
  • Taxation Country
  • Country of Birth
  • Country of Incorporation
  • Operating Countries
  • Employer Name
  • Match Score
  • Watchlist ID
  • Watchlist Record Type
  • Watchlist Key
  • WL Given Names
  • WL Family Name
  • WL Full Name
  • WL DOB
  • WLYOB
  • WL Country Of Birth
  • WL Nationality Countries
  • WL Operating Countries
  • WL All Countries
  • Event Decision
  • Comments