Skip to main content
When an insight is selected, its status can be changed using the Mark as read, Silence, and Close buttons.
Manage security insights

Mark insights as read

Insights are not automatically marked as read when viewed. To mark an insight as read, click Mark as read. To keep an insight as a reminder for later action or review, leave it unread.

Silence insights  

An insight can be silenced if it has been viewed, but no action is taken, or it is not closed. Silencing an insight means pausing all notifications for a specific period (e.g., a week, month, custom period, or indefinitely).   The available silence options depend on the insight types. You can silence insights at different levels:
  • For a specific entity (for example, a particular IP address or policy).
  • For a specific entity and rule combination (for example, an IP address or policy with a specific rule).
  • For all insights of the same type.
TipTo stop silencing an insight, see the Manage Silence Rules guide.

Close insights 

After reviewing an insight, it can be removed from the list by clicking the Close button.
InfoClosed insights are automatically deleted after 30 days unless reopened.

Reopen insights 

To reopen a closed insight for further investigation, reassessment, or verification of mitigation effectiveness, in the Status dropdown, select Closed.
Filter the insights with the Status dropdown
Select the insight to reopen, and click the Reopen button.
Select Reopen
The insight will reappear in the list on the Security Insights view.