https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-cortex-xdr-rule-exclusion-with-specific-time/m-p/554566#M5008 <P>Hi community</P> <P>&nbsp;</P> <P>I wonder if are there any of you who succeed/ever experienced creating Exclusion Rule in Cortex XDR but the rule will only be applied if the incident occurred at a specific time. As I read Palo's documentation and dig down into the community, I haven't met the case that matched mine. If there are any documentation links or solutions to help me on this case, it would be appreciated. Thank you.</P> <P>&nbsp;</P> Tue, 22 Aug 2023 00:29:24 GMT hiroshi.sato 2023-08-22T00:29:24Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-cortex-xdr-rule-exclusion-with-specific-time/m-p/554566#M5008 <P>Hi community</P> <P>&nbsp;</P> <P>I wonder if are there any of you who succeed/ever experienced creating Exclusion Rule in Cortex XDR but the rule will only be applied if the incident occurred at a specific time. As I read Palo's documentation and dig down into the community, I haven't met the case that matched mine. If there are any documentation links or solutions to help me on this case, it would be appreciated. Thank you.</P> <P>&nbsp;</P> Tue, 22 Aug 2023 00:29:24 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-cortex-xdr-rule-exclusion-with-specific-time/m-p/554566#M5008 hiroshi.sato 2023-08-22T00:29:24Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-cortex-xdr-rule-exclusion-with-specific-time/m-p/554701#M5016 <P>Hello&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/310848">@hiroshi.sato</a>&nbsp;</P> <P>&nbsp;</P> <P>Thanks for reaching out on Live Community!</P> <P>Unfortunately there is currently no option to create exclusion based on the occurrence time of an incident.</P> Tue, 22 Aug 2023 14:29:55 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-cortex-xdr-rule-exclusion-with-specific-time/m-p/554701#M5016 nsinghvirk 2023-08-22T14:29:55Z