Understanding Nightfall's Actions

You can filter to view violations based on their status:

Nightfall provides for several actions that you may want to perform on a violation. The actions that are available can vary depending on the status of the violation or the integration type.

Note: The actions described here are manual actions that you need to perform when a violation is notified. Alternately, you can configure Nightfall for Automated Actions, which also vary depending on the type of integration.

You can perform some or all of the following actions from the violations dashboard:

  • Ignore

  • Acknowledge

  • Notify Slack

  • Notify Email

  • Send to Jira

  • Redact

  • Quarantine

  • Change Link Settings

  • Mark as Private

  • Disable Download

  • Delete Attachment

  • Delete

You can instantly act on a violation. To act,

  1. Click the … (ellipsis) in the same row as the violation.

  2. Select the action you want to perform from the list of actions.

Actions once performed are not reversible.

To delete a violation, you need admin access.

The following table details the actions available to each integration

IntegrationActions Available

Salesforce

Ignore

Acknowledge

Send to Jira

Redact

Delete

Zendesk

Ignore

Acknowledge

Send to Jira

Redact

Mark as Private

Delete

Slack

Ignore

Notify

Send to Jira

Quarantine

Redact

Delete

Jira

Ignore

Acknowledge

Notify Slack

Notify Email

Send to Jira

Redact

Delete

Confluence

Ignore

Acknowledge

Notify Slack

Notify Email

Send to Jira

Redact

Delete

Google Drive

Ignore

Acknowledge

Notify Slack

Notify Email

Send to Jira

Change Link Settings

Delete

Disable Download

Bulk Actions

Nightfall allows you to perform actions on a large set of violations. The Violations screen displays a maximum of 50 violations. With Bulk actions, you can choose to implement an action either on the 50 violations which are currently displayed on the screen or on all the violations including the 50 displayed on the violation screen.

Important: You can apply bulk action on a set of violations, only if all the violations belong to a specific integration. Hence, you must use the filter on the integraiton screen to view only those violations which belong to a specific integration.

For example, you can apply filter to display on violations reported by the Salesforce integration. Once you appl,y the filter to view only Salesforce integrations, you can then apply bulk action on all the Salesforce violations.

To use the Bulk actions feature:

  1. Navigate to the Violations screen in Nightfall.

  2. Apply an integration filter to view the list of violations which belong to a specific integration. You must select only a single integration. If you select multiple integrations, you cannot usd the Bulk actions feature.

  1. Select the Finding check box. The 50 violations displayed on the screen are selected.

  1. (Optional) You can also choose to select all of the violations that beloing to the filtered integration.

  1. Select one of the actions to be performed on all the selected violations.

  2. Click Confirm to proceed with the bulk action.

Last updated