Exclude an issue - You can exclude issues that are not deemed to be a threat. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

During the process of triaging and investigating issues, you might determine that an issue does not indicate threat. You can choose to exclude the issue, which hides the issue, excludes it from cases, and excludes it from search query results.

You can also set up issue exclusion rules that automatically exclude issues that match certain criteria. For more information, see Issue exclusions.