Create an exclusion rule
Create a rule to filter or exclude detections from getting converted into vulnerable items (VITs) during ingestion.
Before you begin
Role required: Vulnerability admin
About this task
Procedure
Navigate to All > Vulnerability Response > Exclusion Rules.
On the Exclusion Rule record page, select New to create a rule.
Image omitted: create-exclusion-rule.png
Create exclusion rule
Create exclusion rule
A message saying 'Enable property to automatically close vulnerable items when all associated detections are closed' is displayed. By default, the property is inactive. To enable, select the property link and enter the value as True in the **Value** field.
- On the form, fill in the fields.
| Field | Description |
|---|---|
| Name | Name of the exclusion rule. |
| Active | Option to activate the exclusion rule. |
| Execution order | Unique order for each exclusion rule. |
| Condition | Filter conditions for the detections that can be defined while processing them.Note: You can’t select Exclusion rule or Vulnerability item field conditions. |
| Description | Description of the exclusion rule. |
Select Submit.
The activity is recorded in the system.
Note: Once an exclusion rule is created, it takes effect on detections starting from the subsequent ingestion.