Cortext XDR exclude alert functionality

[SHAIKHR]

Greetings,

on the alert page:
For the right-click / manage alert / exclude alert

what is the function of the "exclude alert"
is it based on the alert name ? host name ? process?

what are the way to look at all the previous "exclude alert" 
and how to undo "exclude alert"

thanks 

[kiwi]

Hi @SHAIKHR ,

I'm moving this discussion to the Cortex XDR area in order to get more traction.

Kind regards,

-Kim.

[PiyushKohli · Accepted solution]

Hi @SHAIKHR 

Regarding your query on exclude alert similar query has been answered in the following post. 

To look for all previous exclude alerts from alerts page apply below filter as shared in screenshot and from the alert itself as well you may undo Alert exclusion. 

Feel free to write back if you have further query.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.