Reassign alert after AI processing

Learn how an alert assigned to an operator and handled by the AI Specialist is automatically reassigned to the original operator after AI investigation or remediation completes.

Before you begin

Role required: evt_mgmt_operator, evt_mgmt_admin

About this task

The AI Specialist takes an alert only when it is not already assigned to a human operator. If an alert already has an assignee, the AI Specialist does not run on it automatically. When the AI Specialist does take an assigned alert—through an alert rule or a manual remediation/insight trigger—it records the original assignee. The alert can then be returned after processing. If the alert is closed as noise, it is not reassigned back to the operator.

Procedure

1. Navigate to Workspaces > Service Operations Workspace.
2. From the navigation bar, select the Express list icon: .
3. In the alerts list, select an alert number to open the alert.
   On the Details tab, in the Assigned to field, note the name of the operator the alert is assigned to.
4. On the Overview tab, where it shows Waiting for approval, select Approve to let the AI Specialist analyze the alert.

   The AI Specialist workflow starts and the Assigned to field changes to AI Specialist. After the workflow completes, the field resets to the original operator—unless the alert was closed as noise or manually reassigned.