XDR Alert Exclusion

nithin.k — Thu, 19 Oct 2023 08:23:32 GMT

Hi,

I excluded an alert from an incident.

But i am not able to see that exclusion being created under Settings > Exceptions Configuration > Alert Exclusions.

May i know why?

Kindly help.

Thanks,

Nithin

Re: XDR Alert Exclusion

aspatil — Thu, 19 Oct 2023 12:39:09 GMT

Hi Nithin,

Thank you for reaching out to Palo Alto Live Community.

As you have excluded the alert, it won't disappear from the Incidents. It will be present there with excluded mark.

The second screenshot which you have shown display the custom alert rule which you will be creating by clicking on
Create Alert Exclusion Rule.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.

Regards,

Ashutosh