> ## Documentation Index
> Fetch the complete documentation index at: https://docs.goguardian.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage Flagged Activity

> Use GoGuardian Admin's Flagged Activity to identify concerning terms on webpages students visit, review results by org unit, and configure notifications.

Flagged Activity lets administrators identify concerning terms that appear on webpages visited by students, without blocking content. When a term on your Flagged Terms list appears anywhere in a page's HTML source (including metadata), GoGuardian Admin generates an alert. Use the results page to review flagged domains by org unit, export data for reporting, and configure notifications by severity level.

## Manage Your Flagged Terms List

The terms on your Flagged Terms list are what the Flagged Activity engine scans for on every page visited by a student with GoGuardian installed. A default list is provided, but you can add, remove, and adjust severity for any term.

To reach the configuration page, go to GoGuardian Admin and select **Flagged Activity**, then select **Configuration**.

**Add a term:**

1. Go to GoGuardian Admin and select **Flagged Activity**.

2. Select **Configuration**.

3. In the **Search or Add Term Here** field, enter the term you want to add.

4. If the term does not already appear in the list, click **Add Term**.

5. Verify the result: The new term appears in your Flagged Terms list.

**Set severity before adding a term:**

Before clicking **Add Term**, select a severity level from the **Severity** dropdown. The available levels are Low, Medium, and High.

**Change severity for an existing term:**

1. In the **Search or Add Term Here** field, enter the term you want to update.
2. Select the **Severity** dropdown to the right of the term.
3. Select the new severity level.
4. Verify the result: The updated severity level appears next to the term in the list.

**Remove a term:**

1. Go to GoGuardian Admin and select **Flagged Activity**.
2. Select **Configuration**.
3. In the **Search or Add Term Here** field, enter the term you want to remove.
4. Select the delete icon next to the term in the list.
5. Verify the result: The term no longer appears in your Flagged Terms list.

<Note>
  A flagged term does not mean a student searched for it. The Flagged Activity engine scans the full HTML source of every page, including metadata and code. A search for an unrelated topic can generate a flag if a flagged term appears anywhere in the resulting page's source.
</Note>

## Review Flagged Activity Results

The Flagged Activity results page shows flagged domains across your organization. Filter by org unit to focus on a specific school or group.

1. Go to GoGuardian Admin and select **Flagged Activity**.

2. Use the **Org Units** dropdown to filter results by org unit, or leave it set to the full organization.

3. Review the results table. Each row displays the flagged hostname, severity level, date and time, and the user who generated the flag.

4. To see details for a domain, click the **+** icon to expand the row.

<img src="https://mintcdn.com/goguardian/FVKUrnWRnACRmEDK/images/screenshots/manage-flagged-activity/step-01.png?fit=max&auto=format&n=FVKUrnWRnACRmEDK&q=85&s=d7f0845e4d5c817c2d59d84ef3d39c87" alt="The main Flagged Activity page highlighting the Org Unit selection menu to change which group of Flagged Activity is…" width="3540" height="1146" data-path="images/screenshots/manage-flagged-activity/step-01.png" />

The expanded view shows:

* The exact page URL that was visited
* Additional users who generated a flag on the same domain
* The flagged term or terms, with a number next to each term indicating how many times it appeared on the page or in the page metadata
* A **Dismiss all from URL** button to clear all alerts from that hostname

<Note>
  The results page supports user-level drill-down. To see exactly which student accessed flagged content, click a username in the results table. The drill-down view shows that student's full flagged activity log, including the specific URLs visited and the terms triggered.
</Note>

5. To clear all flagged activity at once, click **Dismiss All**.
6. Verify the result: Dismissed alerts no longer appear in the results list.

<Note>
  Flagged Activity does not block pages. It generates alerts only. To block content, use filtering policies or Smart Alerts Triggers.
</Note>

<Tip>
  To prevent a specific domain from generating Flagged Activity alerts entirely, add an Allow rule for that domain in the filtering policy assigned to the affected OU. Apply the rule to a policy at the root OU to suppress alerts for all users in your organization. See [Block and Allow Websites](/products/admin/block-and-allow-websites).
</Tip>

<img src="https://mintcdn.com/goguardian/FVKUrnWRnACRmEDK/images/screenshots/manage-flagged-activity/step-02.png?fit=max&auto=format&n=FVKUrnWRnACRmEDK&q=85&s=6d0f629ae73a7c6d5c5c45ecfed5dc59" alt="Flagged Activity 'Activity' page displaying alert hostnames, student names, Flagged Terms and more" width="3038" height="1446" data-path="images/screenshots/manage-flagged-activity/step-02.png" />

## Export Flagged Activity Data

Download a CSV of flagged activity to share with district leadership or for external reporting.

1. Go to GoGuardian Admin and select **Flagged Activity**.

2. Click **Download as CSV**.

3. Select a timeframe and org unit.

4. Enter a title and set a row limit.

5. Click **Export**.

6. Verify the result: A CSV file downloads to your device with flagged activity data for the selected timeframe and org unit.

<img src="https://mintcdn.com/goguardian/FVKUrnWRnACRmEDK/images/screenshots/manage-flagged-activity/step-03.png?fit=max&auto=format&n=FVKUrnWRnACRmEDK&q=85&s=a6d754343784f540c0b6f82a5b8bb9d0" alt="The Flagged Activity CSV Export option" width="2314" height="1352" data-path="images/screenshots/manage-flagged-activity/step-03.png" />

## Configure Notification Settings

Control which severity levels trigger email notifications. Administrators only receive notifications for flagged activity from org units they have access to in Org Management.

1. Go to GoGuardian Admin and select **Flagged Activity**.

2. Select **Notification Settings**.

3. Choose a notification option:

| Option                   | What it does                               |
| ------------------------ | ------------------------------------------ |
| None                     | No email notifications                     |
| All                      | Emails for all severity levels             |
| High and Medium Severity | Emails for medium and high severity alerts |
| High Severity            | Emails for high severity alerts only       |

4. Verify the result: Your notification setting is saved and applies to all future flagged activity from your accessible org units.

**Understand severity levels:**

Severity is calculated based on the severity assigned to individual terms, how frequently those terms appear on a page, and the relative weight of flagged terms on that page. A page with a high number of low-severity terms can still register as High Severity.

**Understand email rate limits:**

GoGuardian Admin limits notification emails to reduce alert fatigue:

* 1 email per 10 minutes
* 5 emails per hour
* 10 emails per 24 hours

<Note>
  Notification scope is based on org unit access. Administrators receive flagged activity notifications only for org units they can access in Org Management. If you are not receiving expected notifications, confirm your org unit access with your tech director.
</Note>

## Resources

<CardGroup cols={2}>
  <Card title="Understand Smart Alerts" href="/products/admin/smart-alerts">
    Review how GoGuardian Admin uses machine learning to identify flagged content and generate alerts.
  </Card>

  <Card title="Compare Smart Alerts and Flagged Activity" href="/products/admin/smart-alerts-vs-flagged-activity">
    Understand the differences between Smart Alerts and Flagged Activity and when to use each.
  </Card>
</CardGroup>
