The audit buttons 
in the Search Results screen allow rapid bulk auditing. They enable you to quickly update multiple events without needing to view the events first. If the same audit change is applicable to multiple events, you can update the relevant issues for all the events with just one click of a button.
Note: If an appropriate issue does not exist, an audit button can be reconfigured to create the issue automatically.
Examples
A reviewer sorts a set of search results by Subject and notices a number of events with the same Subject. It is clear that events comprise a single e-mail thread between two employees. After reviewing the final reply in the thread, the reviewer knows the preceding replies are benign and so approves all the events in the thread by selecting the event check boxes and clicking the 'Approve' button.
Often, the same events are ingested into the CMS from multiple Policy Engines, and are displayed as multiple duplicate rows in the iConsole. You can customize a standard search to list duplicate events with specific criteria, and group these duplicates together.
A de-duplication search saves you the effort of identifying and handling duplicate events. You create and run your custom search, select a parent event, and apply audit actions (including print, review, escalate) to its child events in bulk.
|
Copyright © 2014 CA.
All rights reserved.
|
|