About SmartVision alerts listed without groupings

The SmartVision alerts list can display alerts without group them. By default, the alerts are sorted by alert generation date and time.

The following table describes the columns in the SmartVision alerts list:

Column	Description
ID	The order of the alert in the list of all SmartVision alerts in the database. The value `1` indicates the oldest alert in the database.
Name	The name of the rule used to detect the malicious activity. To display a description attacks detected by this rule, click the linked text.
Type	The name of the attack type. To display a description of this attack type, click the linked text.
Time	The date and time when the event occurred.
Source IP	The IP address of the network host that sent the suspicious traffic.
Destination IP	The IP address of the network host that was targeted by the traffic.
Severity	The estimated likelihood that the event compromised the targeted host: 1 – 3 (minor), 4 – 6 (major), or 7 – 10 (critical).
SC version	The security content version used to detect the alert.

To view more information about an alert in the list, do the following:

Click the rule name (the Name column) to view detailed information about the attacks detected by that rule.
Click the attack type (in the Type column) to view detailed information about attacks of that type.
Click the arrow icon () to expand the alert and show alert details and base events.

For details, see Viewing the SmartVision alerts list using the Web UI.

The following example shows part of a SmartVision alerts list without grouping applied. The Mimikatz Activity Detected alert is expanded to show the alerts details, including the list of three base events for the alert.