XDR Alert Exclusion

[nithin.k]

Hi,

I excluded an alert from an incident.

But i am not able to see that exclusion being created under Settings > Exceptions Configuration > Alert Exclusions.

May i know why?

Kindly help.

@mcooley 

Thanks,

Nithin

[aspatil]

Hi Nithin,

Thank you for reaching out to Palo Alto Live Community.

As you have excluded the alert, it won't disappear from the Incidents. It will be present there with excluded mark.

The second screenshot which you have shown display the custom alert rule which you will be creating by clicking on 
Create Alert Exclusion Rule.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.

Regards,

Ashutosh