---
title: "Bulk Actions"
slug: "bulk-actions"
updated: 2026-09-09T16:09:29Z
published: 2026-09-09T16:09:29Z
canonical: "docs.redcanary.com/bulk-actions"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.redcanary.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create Bulk Actions

The Threat Actions page enables you to filter threats by type and then take action on multiple threats simultaneously.

1. From the navigation menu, click **Threats**, then click **Bulk Actions**.

![Threat_Actions.png](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/11282806922775.png?sv=2026-02-06&spr=https&st=2026-11-09T12%3A26%3A05Z&se=2026-11-09T13%3A26%3A05Z&sr=c&sp=r&sig=s8elbYgcH0bra8%2Fb6405A8%2B6R9miXV0mU73TTbHqyqA%3D)
2. Select values for the following fields (all fields are required):
  - **With state**—The state of the threat. The state of the threat is set by your detection engineers and threat hunters.
  - **And severity**—Zscaler MDR sets the severity.
  - **And classification**—Zscaler MDR sets the classification.
3. Click **Load matching threats**. A list of the threats that match the criteria that you entered and which will be acted upon appears. If no threats appear, that means that there are no threats that match the criteria that you selected.
4. Scroll down to the bottom of the window.
5. Beneath **Take Action**, select the Action that you want to take on all of the listed threats.
6. Enter a comment so that you or a teammate can easily understand what you chose to do should you need to audit past actions.
7. Choose a **Reason**.
8. Click **Execute bulk action**.

> **Note:** To start over, re-select Bulk Actions from the navigation menu.