Is it possible to bulk update incidents in Cloudlock?
A Cloudlock user can select as many Incidents as they see fit and change their statuses to something more appropriate.
The most common use case for this is when a customer has a backlog of unaddressed Incidents in the "New" or "In Progress" status that they want to be changed to a "Resolved" or "Dismissed" status as their original policy configuration was too broad, so they have a large backlog of what they consider false positives.
To do this, the customer can select the checkbox next to the Incident Id column in the Incident tab after they have included their filters. They will then be prompted to choose whether or not they want to select all of the Incidents with these filters.
They can then click the blue "Bulk Action" box which will give them the option to bulk change the status of the selected Incidents.
There is a limit of 50,000 Incidents that this can be applied to but a good way to decrease potential bulk updates is by adjusting the date range filter.
Comments
0 comments
Article is closed for comments.