NOTE: For customers who have enabled Vulnerability-based Alerting (see Security Alerts: View By Vulnerability), this report is no longer available.

Overview

The Alerts Report provides valuable information about alerts that were generated for specific libraries or components in your organization, enabling you to detect problems regarding security, license compliance, quality, versioning, and so on.

Accessing the Alerts Report

1. From the main menu, select Reports > Alerts. The Alerts Report page is displayed.

2. From the All Time dropdown menu, select the required time range for the report. Options are: All Time (default), Last Month, Last 3 Months, Last 6 Months, Last 12 Months.

3. Select the scope for which the report should be created. The default scope is Organizational; however you can select any individual product and/or project for your data scope from the dropdown menus next to the report name. Do as follows:

   1. Open the All Products dropdown menu and select the product on which you want to base the report. 

   2. If you want to base the report on specific projects, open the All Projects dropdown menu and select one or multiple projects in the selected product.

   3. Click Apply and wait for the data to load into the report table.

4. To further filter the report, do as follows:

   1. Expand the Filter area, select a property, and enter the value by which to filter.
      The property options are: Library (default), Type, Library Type, Creation Date, and Modified Date.

   2. Click Filter.

5. You can also filter the report by alert types. To do this:

   1. Select or clear the All or Security radio buttons to display all alert types or just security alerts. By default, All is selected.
      You can deselect any of the selected alert types by clearing the check boxes in the Filter area.
      NOTE: You can quickly select all the alert types by clicking the select all alert types link or clear all the check boxes by clicking the deselect all alert types link. 

After selecting all the relevant filters, the Alerts Report is generated displaying all the relevant alerts.

...

Understanding the Report Data

The Alerts Report displays the following attributes per alert:

• Library: Name of the library that contains the alert.

• Type: Alert type. Can be one of the following:

  • Security Vulnerability

  • High Severity Bug

  • New Major Version

  • New Minor Version

  • Rejected By Policy Resource

  • Multiple Library Versions

  • Multiple Licenses

  • Rejected Defacto Resource

• Description: Severity of the alert and number of instances. You can click the details link for more information about the alert.

• Library Type: Java, source library, etc.

• Creation Date: Date the alert was created.

• Modified Date: The modified date is updated whenever a CVE is added to an alert or if the alert state is changed (for example, if the alert is ignored). When an alert comprises several occurrences and each occurrence has its own modified date, the modified date is taken from the last occurrence of the alert.

• Occurrences: Number of instances in which the alert is generated in any project in the organization. You can click the details link to see where the alerts occurred according to product and project.

• Ignore: Click ignore to ignore selected alerts. You will be asked to provide a reason for ignoring them. For details, see the next section Ignoring Alerts.

Ignoring Alerts

In the Alerts Report, you can change the status of alerts from active to ignored state. Alerts marked as ignored will not appear in dashboards and reports (for more information, see The Ignored Alerts Report).

• To ignore a single alert, select its checkbox and click the ignore link at the right of the row.

• To ignore multiple alerts, select their checkboxes and click the Ignore Selected button.

• To ignore All alerts in the report table simultaneously, select the checkbox above the table in the column titles row, and click the Ignore Selected button.

Exporting the Report

To export the report, click the Export dropdown menu at the top right corner of the report, and select the required export format:

• Excel

• JSON

• XML

The exported report will reflect the selected scope (organization, product, or project) and filters.

For examples of exported report types, see https://whitesource.atlassian.net/wiki/spaces/WD/pages/1897922806/Copy+of+Working+with+WhiteSource+Reports#Exporting-a-Report.This page is available at: https://docs.mend.io/bundle/sca_user_guide/page/the_alerts_report.html