Viewing Bulk Job Results

When you run a bulk Action, Evaluation, or Sequence the Bulk Job Results page displays (see the screenshots below ). This page displays the following information:

  • Name of the bulk Action, Evaluation, or Sequence
  • Job info that provides general information about the Job, as well as a progress bar
  • Security summary showing an aggregate of what has been prevented, detected, and alerted during this run
  • Table showing the individual Jobs that ran.

    From the table, you can click View  to go to that individual Job's page. This table also displays the Job ID, status, Source and Destination Actors, security technologies, and results for each individual Job.

    You can filter results by entering text in one or more column header search field. You can sort by clicking on the column header and you can resize columns, as needed.

Bulk Action Result page - Network Action

Bulk Action Results page - Sequences with Multiple Groups of Actions

Bulk Action Results page - Evaluations with Multiple Groups of Actions

  • To export the results, click Export CSV
  • Bulk Actions can be run again from the Bulk Job Result page by clicking Run Again.

    When you choose Run Again, it selects the same Actor Tags and parameters. The original Job is not overwritten.

For bulk endpoint Actions, the Bulk Action Result page is similar, but notice in , there is only one Actor column (the endpoint Actor). You can also view the CLI log for each individual Job.

Bulk Action Result page - Endpoint Action

When you click View for an individual Job that ran as part of the bulk Action, the standard Job Results page displays for that Job.

Bulk Job Export Fields

Field TitleDescriptionField Format
Job IDID of the Job that was runInteger
StatusStatus of Job that was runString
Source ActorIndicates source Actor (IP address of source Actor)String
Destination ActorIndicates destination Actor (IP address of destination Actor)String
Endpoint ActorIndicates Actor for the endpointString
BlockedIndicates whether Action was blockedBoolean (True/False)
DetectedIndicates whether Action was detectedBoolean (True/False)
AlertedIndicates whether an Alert was createdBoolean (True/False)
Security TechnologiesIndicates whether if Security Technologies are presentString
  • June 5, 2022
  • September 27, 2023
In This Article