4.3.1 Event Decision

This topic describes how to take decision for the selected event(s).

Note:

Enable the Select All check box to select all the events associated with this case from the Event Status (Pending, Clean, and Suspicious) to make a decision. By default, one event (top most) is always selected in the Event Status pane.

To take decision of the selected event(s), follow these steps:

1. On the left pane, select the Event.
2. Select reason from the Standard Reasons drop-down list. You can select either Clean or Suspicious reasons and this field is optional.
3. Enter your comments in the Comments field. This field is optional.
4. Click Suspicious. The selected event(s) will be moved under Suspicious status to take decision.

   Note:

   The Suspicious button displays only when you are selecting suspicious reason from the Standard Reasons drop-down list.
   OR
   Click Clean. The selected event(s) will be moved under Clean status to take decision.

   Note:

   The Clean button displays only when you are selecting clean reason from the Standard Reasons drop-down list.