cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
945
Views
0
Helpful
0
Replies

Mute IPS email alert

ryan14
Beginner
Beginner

Hi is there a way to mute an IPS email alert via correlation events for a GID/SID combo? I tried matching based on rule name, but I want an "IS NOT" option (to filter out email alerts to not send). You can filter SID, but the problem is, multiple rules match the SID you need the GID-SID number to identify the exact rule and I don't see a way to do that.

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers