Exclude an alert - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2024-10-13
Category
Administrator Guide
Abstract

You can exclude alerts.

To exclude an alert:

  1. From the Alerts page, locate the alert you want to exclude.

  2. Right-click the row, and select Manage AlertExclude Alert.

    A notification displays indicating the exclusion is in progress.