topic Re: Cortext XDR exclude alert functionality in Cortex XDR Discussions

Cortext XDR exclude alert functionality

SHAIKHR — Tue, 10 Oct 2023 03:31:06 GMT

Greetings,

on the alert page:
For the right-click / manage alert / exclude alert

what is the function of the "exclude alert"
is it based on the alert name ? host name ? process?

what are the way to look at all the previous "exclude alert"
and how to undo "exclude alert"

thanks

Re: Cortext XDR exclude alert functionality

kiwi — Mon, 16 Oct 2023 13:44:16 GMT

Hi @SHAIKHR ,

I'm moving this discussion to the Cortex XDR area in order to get more traction.

Kind regards,

-Kim.

Re: Cortext XDR exclude alert functionality

PiyushKohli — Tue, 17 Oct 2023 06:29:43 GMT

Hi @SHAIKHR

Regarding your query on exclude alert similar query has been answered in the following post.

To look for all previous exclude alerts from alerts page apply below filter as shared in screenshot and from the alert itself as well you may undo Alert exclusion.

Feel free to write back if you have further query.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.