Manage Alerts
Use the following information to know more about the supported options for an alert after it is published. Click the vertical ellipsis of an alert to see the following options:
View: View the details of a submitted, draft, or published alert. You can also click the unique alert ID to view the details of an alert.
Copy: Copy the details of the alert to a new alert. Use the information in Create Alerts to make the required changes and publish the alert. To know more about this, see Copy Alerts.
Update: Update alert details. When you update the alert and republish it, the old alert expires. To know more about this, see Update Alerts.
Edit: Edit a published alert. You can only edit a published alert within an hour of publishing. This feature allows analysts to make changes or corrections to the published alert.
Note
Both Edit and Update options let you make changes to a published alert, but the Edit option is unavailable one hour after publishing the alert.
Copy URL: Copy the alert URL to share the alert link.
Expire: Expire an alert. After an alert is expired, it cannot be edited or published. Analysts can view it as an expired alert, but the alert is deleted in the Member Portal. To know more about this, see Expire Alerts.
Community Sharing: Select the communities to share alerts with. Collaborate automatically selects communities for sharing alerts based on the conditions configured in the rules. For example, when an alert is configured with RED TLP, the rule can automatically share the alert with an ISAC community. You cannot view communities that do not allow sharing alerts. To manage and add sharing communities, see Manage Sharing Communities.
Send Mobile Notifications: Send mobile push notifications of the alert to the recipients. You can only view this option if you have not enabled mobile notifications during alert creation. To know more about this, see Send Notifications for a Published Alert.
Send Email Notifications: Send an email push notification of the alert to the recipients. You can view this option if you have not enabled email notifications during alert creation. To know more about this, see Send Notifications for a Published Alert.
Print and Export: Print or export the alert for offline analysis. To know more about this, see Print and Export Alerts.
Additionally, you can manage alerts in the following ways:
Click Open Filters to search and filter keywords for alert information. You can filter alerts based on title, category, TLP, status, recipient group, creator, publisher, and more. By default, the list shows alerts published in the last 7 days.
Click Export Alerts to export all alert details in the selected channel in .csv, .xml, and .json formats. You will receive the link to the exported file in your email from where you can download it. The link can only be used once and expires in 72 hours from the time you receive it.
The background process may take a short while to compile the report based on data in the alerts.
Note
When you export the list of alerts in the .csv format, the alert IDs in the exported sheet are now in the format A-alert ID. For example, if the alert ID is 570e638b in Collaborate, the alert ID in the exported CSV sheet is A-570e638b. This prevents the alert IDs from being converted to scientific notations after export.
Click Alert Logs to view the status of all alerts that are posted to CTIX. For more information, see View Alert Logs.
Click My Queue to view all the alerts submitted by creators for review and publishing. To know more about reviewing alerts, see Publish Alerts.
Click Create to create a new alert or an alert from a template. Only analysts with creator permissions can create an alert. To know more about creating alerts, see Create Alerts.