cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

870
Views
0
Helpful
0
Replies
ryan14
Beginner

Mute IPS email alert

Hi is there a way to mute an IPS email alert via correlation events for a GID/SID combo? I tried matching based on rule name, but I want an "IS NOT" option (to filter out email alerts to not send). You can filter SID, but the problem is, multiple rules match the SID you need the GID-SID number to identify the exact rule and I don't see a way to do that.

0 REPLIES 0
Content for Community-Ad