View issue Exception Rules - The All Exceptions Rules page displays the list of rules along with important details. - Administrator Guide - Cortex XDR - Cortex

View issue Exception Rules - The All Exceptions Rules page displays the list of rules along with important details. - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product

Cortex XDR

License

XDR + Cloud

Creation date

2025-07-13

Last date published

2026-06-11

All Exception Rules field descriptions

The table below describes each field in the All Exception Rules table.

Field	Description
Approver Email	Email address of the approver.
Approver Name	Name of the approver.
Backward Scan Status	Processing status of the exception rule. It indicates whether or not the exception has taken effect. Possible values include: Pending: the system has not started excepting issues. In progress: the system is actively updating the issues. Failed: issue exception failed Done: all affected issues have been marked as excepted
Decision Justification	Justification provided by the approver for approving or rejection the exception rule request.
Exception ID	Unique ID for the exception rule.
Expiration Date	Date the exception expires. This is the Exception End Date that was specified when the exception rule was created.
External Exception ID	Optional reference provided when the rule was created.
Impacted Issues	?Number of issues impacted by the exception request.
Justification	Description of the business justification for this exception.
Justification Category	High-level category of the business justification.
Name	Name of the rule.
Requestor Email	Email address of the person who created the exception rule.
Requestor Name	Name of the person who created the exception rule.
Rule	The issue ID or other issue identifiers used to define which issues the exception applies to.
Status	The current workflow status for the rule. Refer to the Exception Rule status descriptions table for a description of each status.

Exception Rule status descriptions

The following table describes the status field values for exception rules.

Status	Description
Approved	The rule has been approved and is active.
Disabled	The rule has been manually disabled.
Expired	The Exception End Date for the rule has passed.
No Decision Made	The approver did not respond to the issue exception rule request within seven days, so the request timed out.
Pending Decision	The issue exception rule request was sent to the approver. The approver has not yet responded but the request is still within the seven-day response window.
Rejected	The approver rejected the issue exception rule request.
Self Approved	The rule was created when the Exceptions Require Approval setting was toggled “off”.