Creating Anomaly Exceptions

At times, to handle falsely flagged events, administrators may need to create exceptions for anomaly detections.

  1. Go to Events screen.
  2. Select the anomaly event for which you want to create an exception.
  3. Click on the vertical ellipsis icon (in the right side of the selected anomaly event), and then select Add Exception.

    Create allow-list for anomaly pop-up screen appears.

  4. Under Allow-List type, select the required exception from the drop-down.
    Note:

    The drop-down shows different options applicable for the anomaly event you selected.

  5. Under Apply for all past events, select Yes or No.

    • Yes - The exception gets applied to all the events in the past and to the future events.

    • No - The exception gets applied only to the event you selected and to all the future events.

  6. If required, enter a Comment for the anomaly exception.
  7. Click OK.

To see all the anomaly exceptions, go to Security Settings > Exceptions > Anomaly.