Exclude an alert - Administrator Guide - Cortex XDR - Cortex - Security Operations

From the Alerts page, locate the alert you want to exclude.

Right-click the row, and select Manage Alert → Exclude Alert.

A notification displays indicating the exclusion is in progress.