The Alert Resolution Duration Report

NOTE: For customers who have enabled Vulnerability-based Alerting (see Security Alerts: View By Vulnerability), this report is no longer available.

Overview

The Alert Resolution Duration Report provides information on alerts that were resolved and are therefore no longer relevant. 

Accessing the Alert Resolution Duration Report

1. From the main menu, select Reports > Alert Resolution Duration. The Alert Resolution Duration Report page is displayed.

2. From the All Time dropdown menu, select the required time range for the report. Options are: All Time (default), Last Month, Last 3 Months, Last 6 Months, Last 12 Months.

3. Select the scope for which the report should be created. The default scope is Organizational; however you can select any individual product and/or project for your data scope from the dropdown menus next to the report name. Do as follows:

   1. Open the All Products dropdown menu and select the product on which you want to base the report. 

   2. If you want to base the report on specific projects within the product, open the All Projects dropdown menu and select the projects.

   3. Click Apply and wait for the data to load into the report table.

4. To further filter the report, do as follows:

   1. Expand the Filter area, select a property, and enter the value by which to filter.
      The property options are: Library (default), Type, Library Type, Creation Date, Resolution, and Resolution Date.

   2. Click Filter.

5. You can also filter the report by alert types. To do this:

   1. Select or clear the All or Security radio buttons to display all alert types or just security alerts. By default, All is selected.
      You can deselect any of the selected alert types by clearing the check boxes in the Filter area.
      NOTE: You can quickly select all the alert types by clicking the select all alert types link or clear all the check boxes by clicking the deselect all alert types link. 

After defining all the relevant filters, the Alert Resolution Duration Report is generated displaying all the resolved alerts.

Understanding the Report Data

The Alert Resolution Duration Report displays the following attributes per alert:

• Library: Name of the open source library. Click on the library name in order to be forwarded to its Library Details page.

• Type: The type of vulnerability:

  • Security Vulnerability

  • High Severity Bug

  • New Version

  • Policy Violation

  • Multiple Library Versions

  • Multiple Licenses

  • Rejected Library In Use

• Description: The overall bug severity of the library that is determined by the severity of the bug(s), and number of bugs that were found. The following ratings are provided:

  • High: Assigned to libraries with at least one blocker or one critical or ten major bugs.

  • Medium: Assigned to libraries with one to nine major bugs.

  • Low: Assigned to all others that are not high or medium.

You can click on the details link for more information on the library and its vulnerabilities.

• Library Type: Java, source library, etc.

• Creation Date: The date when the alert was created.

• Resolution: Reason for the alert resolution.

• Resolution Date: The date when the alert was resolved.

• Occurrences: The number of occurrences for this library. Clicking on the 'details' link displays the relevant products/projects.

Exporting the Report

To export the report, click the Export dropdown menu at the top right corner of the report, and select the required export format:

• Excel

• XML

The exported report will reflect the selected scope (organization, product, or project) and filters.

For examples of exported report types, see https://docs.mend.io/legacy-sca/latest/the-reports-menu#TheReportsMenu-ExportingReports .