Listed in the Actions column for an event are the actions that you can take for that event. (The available actions may vary depending on the type of event or cloud application.) These actions might include:
Alerting the user or recipient
Quarantining the email message or file
Dismissing the alert
Creating a new rule based on the event(s) for that item (refer to Creating New Policy Rules for more information)