I think the main reason historically is that each UI has different use
cases and user roles.  The Management UI will mainly be used by an Security
Platform Engineer, while the Alerts UI will be used by a SOC Analyst,
Investigator or Manager.

That being said, I am not against a single, unified UI, as long as it is
paired with appropriate role based access controls.



On Thu, Sep 28, 2017 at 12:10 PM Laurens Vets <laur...@daemon.be> wrote:

> As the subject says, is there a specific reason to have the Management &
> Alerts UI separate?
>
> Having another option under "Operations" called "Alerts" in the
> Management UI seems to make more sense to me... If it's because they are
> called Management UI and Alerts UI, maybe we should make it more general
> and name it Metron UI?
>

Reply via email to