For Admins and Supervisors.
Before you begin
Confirm your role has Inbox access. See User Roles.
Know which workflow tab you want to review — Pending, In Review, Escalations, or Closed. Filters apply the same way across all four tabs.
If you plan to filter by policy, know the specific Policy Module, Lexicon, or Term you're looking for.
Steps
Click Inbox in the top navigation. The Inbox opens on the Pending tab with alerts already loaded — unlike the Archive, no search is required to see results.
Under Basic information, enter a keyword or Alert ID, and set a Date Range if needed. Keyword search matches an exact phrase and ignores surrounding symbols. Enter a comma-separated list to match alerts containing any of the listed terms.
Expand Advanced Options and select from Risk Level (Low, Medium, High), Assignee, Attachments on Messages, and Noise on Messages. The Risk Level and Attachments/Noise pairs are multi-select — leaving a group unselected returns the same results as selecting every option in that group. Assignee lists the Admin and Supervisor users who can be assigned alerts.
Under Participants, search for and add one or more participants in Participant Search. You can select a specific identity (for example, one email address or Bloomberg chat ID) or select a person's (All) entry to match every identity that person uses across all their communication channels. Add as many participants as you need — each one appears in a list below the search box with its own direction control and a delete icon. Use the direction control to limit that participant to messages they sent, messages they received, or both.
If you added more than one participant, set the Matching condition to control how they combine:
Match Any — the alert must involve at least one of the listed participants.
Match All — the alert must involve all of the listed participants, and may also involve other people not listed.
Match Only — the alert must involve exclusively the listed participants, with no other people included.
Under Supervision, select a Supervision Group to limit results to alerts tagged with that group. You can select one group at a time. Unlike messages in the Archive, each alert carries exactly one User Group tag, based on the detection policy that generated it.
Expand Policies and filter by Policy Module, Lexicon, or Term. Selecting a Policy Module narrows the Lexicon list to lexicons that belong to it; selecting a Lexicon narrows the Term list the same way. These dropdowns show only active entities by default. Select Include Archived Entities to also show archived Policy Modules, Lexicons, and Terms in the lists — useful when searching for alerts triggered before an entity was archived. Archived entities appear greyed out and labeled (Archived).
Under Source, select one or more communication sources.
Click Apply Filters. The results grid updates to show only alerts matching your criteria, and your filter selections stay in effect if you switch to a different workflow tab.
NOTE: The Closed tab includes three additional filters not available on the other tabs: Closed Date Range (defaults to the last 30 days), Closed Status, and Closed by. Closed by matches against the same list of Admin and Supervisor users as Assignee. See Inbox alert filters reference for details.
Result
The results grid updates to show only the alerts matching your filter criteria.
Next steps
See Managing the alert review workflow to assign, resolve, or escalate the alerts you've filtered.