Views:

To remove alerts, use the following database commands:

Dismissible alerts

update alert2s set TimeResolved = getdate()
go
update alert2hosts set TimeResolved = getdate()
go
update alert2administrators set TimeResolved = getdate()
go

Indismissible alerts

  • For Firewall and Stateful events:

    delete from alert2network
    go

  • For alerts assigned to Integrity rules:

    delete from alert2integrityrules
    go

  • For alerts assigned to specific Log Inspection rules:

    delete from alert2loginspectionrules
    go

Keywords: Removing alerts from db,purge undismissable alerts,erase dismissable alert,alert cannot be removed from console,command for dismissing ds alert in database,dismiss multiple alerts at once,Hit the maximum ammount of passes through the logs to purge: 1000