Alert

How it is used

Analysts triage, investigate, close and escalate alerts, and too many low-quality alerts cause 'alert fatigue'. Also a verb: 'the system alerted us'. An alert is not yet an incident; the investigation decides that.

Example sentences

1. We got an alert for logins to the same account from two countries within ten minutes.

2. The team handles about 400 alerts a day, so tuning the rules is a priority.

Common collocations

• triage an alert
• high-severity alert
• alert fatigue
• close an alert
• raise an alert

Related terms

• SIEMSecurity information and event management: a platform that collects logs from many systems, correlates them and raises alerts about possible attacks.
• false positiveAn alert or test result that wrongly reports a threat or vulnerability when nothing harmful is actually there.
• SOCSecurity operations centre: the team, and often the room, that monitors an organisation's systems around the clock and responds to security alerts.
• incidentAn event that threatens or harms the confidentiality, integrity or availability of systems or data, such as a malware infection or an unauthorised login.
• escalateTo pass an alert, incident or problem to a more senior person or team because it is serious or beyond your own authority or skills.

This word in other fields

The same English word can have a different meaning in another field:

• alert · Software Engineering
• alert · Cloud Computing & DevOps

More terms: Security Operations and Monitoring

• log
• blue team
• endpoint
• EDR
• threat intelligence
• threat hunting