View All Open Incidents

The Incidents pane on the Dashboard summarizes the number of open incidents detected against each policy rule. When Prisma SaaS starts scanning files and matching them against enabled policy rules, the default action is to generate a log when a policy violation occurs. If you enabled email alerts for high-risk issues such as malware or PII compliance violations, you will also receive an automatic email notification in addition to the recording of an incident in the log. Using the Dashboard, you can quickly find and view all open incidents to investigate and remediate.
  1. On the Prisma SaaS dashboard, select
    View All Open Incidents
    .
    dashboard-incident-pane.png
  2. Select the
    Rule
    from the drop-down and further sort the open incidents using the columns.
    incidents-select-rule.png
  3. Continue to Assess Incidents and Manually Remediate Incidents, or review the asset rules that triggered the incident and configure Automatic Remediation.

Related Documentation