When you have examined an alert and have determined a course of action, acknowledging the alert is the next step. The acknowledge option provides a simplistic visual checklist to help you differentiate between the alerts you have examined and those you have yet to review. You can view the acknowledged and unacknowledged alerts in the Attack Log of the Manager. To view the acknowledged and unacknowledged alerts, hover over a column, click the drop-down arrow that appears and select the tick mark to view the acknowledged and unacknowledged alert column. Acknowledged alerts are displayed with a tick mark against that alert. When you acknowledge an alert, the alert is removed from the statistical values of the Attack Severity Summary monitor in the Dashboard.
An acknowledged alert can be reverted back to unacknowledged state. To acknowledge/unacknowledge an alert, select the alert and click Ack/Unack. You can also acknowledge or unacknowledge all the alerts that appears in the Attack Log. To acknowledge/unacknowledge all the alerts, click the Other Actions button, and then select Acknowledge All Matching Alerts/Unacknowledge All Matching Alerts.
.png "11_1M8-ack-and-unack-alerts.png")