Skip to main content

Responses are generated using AI and may contain mistakes.

Threat Detection ManagementThreat Detection Management Guide

Delete Exclusions

Delete exclusions you no longer need.

You can delete a single exclusion or multiple exclusions at once.

Delete an Exclusion

  1. Ensure there are no pending changes or updates to your analytics rules. If there are pending changes or updates, apply those changes or updates to your environment or delete the changes or updates.

  2. Under Exclusions, click View all Exclusions.

    The Threat Detection Management Analytics Rule tab with the View all Exclusions button under Rule Exclusions highlighted in a red rectangle.

  3. For an exclusion, click the More menu The more options menu; three vertical dark grey dots on an off-white background., then select Delete.

  4. Click Delete Exclusion.

Delete Multiple Exclusions

  1. Ensure there are no pending changes or updates to your analytics rules. If there are pending changes or updates, apply those changes or updates to your environment or delete the changes or updates.

  2. Under Exclusions, click View all Exclusions.

    The Threat Detection Management Analytics Rule tab with the View all Exclusions button under Rule Exclusions highlighted in a red rectangle.

  3. Select the exclusions you're deleting:

    • To select all exclusions, click the checkbox in the header row.

      All exclusions selected.

    • To select specific exclusions, click the checkbox for each exclusion.

      Exclusion A and Exclusion B selected.

  4. Click Delete.

    The Delete action highlighted in a red rectangle.

  5. Click Delete Exclusion.