Users in the following roles can execute actions on events:
Security Policy Administrator
User
You need to configure the actions before executing actions on events.
To execute actions on events:
Perform a search, and refine the search results as desired.
For more information, Performing a Search.
In the search results, select the events on which you want to execute actions.
Click Event operations > Show action panel.
In the Event Actions panel > Actions drop-down, select the desired actions, then click Execute.
The results of the actions are displayed in the Results field.