Exclude an issue

Exclude an issue from future investigation workflows.

During the process of triaging and investigating issues, you might determine that an issue does not indicate threat. You can choose to exclude the issue, which hides the issue, excludes it from cases, and excludes it from search query results.

Note

Cortex Cloud supports exclusion of up to 100,000 issues.

How to exclude an issue

1. From the Issues page, locate the issue you want to exclude.
2. Right-click the row, and select Manage Issue → Exclude Issue.

   A notification displays indicating the exclusion is in progress.