https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/suppression-of-incicent-source-analytics/m-p/587355#M6713 <P>Hi</P> <P>&nbsp;</P> <P>We are getting high number of false positives which are from source - XDR Analytics how do i suppress them?</P> <P>This Incident count is affecting SLAs</P> Tue, 21 May 2024 05:15:54 GMT meanmach 2024-05-21T05:15:54Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/suppression-of-incicent-source-analytics/m-p/587355#M6713 <P>Hi</P> <P>&nbsp;</P> <P>We are getting high number of false positives which are from source - XDR Analytics how do i suppress them?</P> <P>This Incident count is affecting SLAs</P> Tue, 21 May 2024 05:15:54 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/suppression-of-incicent-source-analytics/m-p/587355#M6713 meanmach 2024-05-21T05:15:54Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/suppression-of-incicent-source-analytics/m-p/587395#M6716 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/859495873">@meanmach</a>, thanks for reaching us using the Live Community.</P> <P>&nbsp;</P> <P>I highly recommend you to watch this webinar:&nbsp;<A href="https://live.paloaltonetworks.com/t5/cortex-xdr-webinars/cortex-xdr-customer-success-webinar-series-part-1-alert-tuning/ta-p/584842" target="_blank">https://live.paloaltonetworks.com/t5/cortex-xdr-webinars/cortex-xdr-customer-success-webinar-series-part-1-alert-tuning/ta-p/584842</A></P> <P>It will guide you to create alert excusions, exceptions and any other needed rule to work with the false positives.</P> <P>We have the second part at the end of May, you can find the link in the same article.</P> <P>&nbsp;</P> <P>If this post answers your question, please mark it as the solution.</P> Tue, 21 May 2024 14:27:05 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/suppression-of-incicent-source-analytics/m-p/587395#M6716 jmazzeo 2024-05-21T14:27:05Z