Views:

Edit the settings of a custom exception.

Procedure

  1. Go to Agentic SIEM and XDR → Detection Model Management.
  2. Click edit_icon=GUID-1F1D1164-5310-4D6D-ACD0-6049C86960AF.png to edit an exception.
  3. Edit the exception settings.
    Note
    Note
    You can edit the following settings for custom exceptions:
    • General Settings
    • Targets
    • Event source
    • Exception type
      Important
      Important
      If you change the exception type from Filter-based exception to Global exception, you cannot revert the change.
    • Match criteria
  4. Click Save.
    Note
    Note
    For more information about adding custom exceptions, see Add custom exceptions.