Viewing alerts in a distributed environment is similar to viewing alerts from your local server, except that you select the data source servers from which you want to view alerts while creating alert views.
To view alerts from data source servers, you must log in to the authorized requestor server as a user with Search Remote Data Sources permission.
For information about creating alert views, see Creating an Alert View
in the Sentinel User Guide.
When you create an alert view with data source servers specified as data sources, you can view the alerts from the data source servers in that alert view. For information about viewing alerts, see Viewing and Triaging Alerts
in the Sentinel User Guide.
NOTE:In distributed environments, you can view alerts only from Sentinel data sources and not from Sentinel Log Manager data sources, because Sentinel Log Manager does not support alerts.