You can edit the offending subsignatures to 'Global Summarize'. Also, I reduced the signatures' alarm severity on my external-facing sensors to below the level at which CW collects alarms (since I really only care about the alarms that make it past a firewall). This way I have not turned the signature off and CAN go look at the details on the sensor(s), if necessary. Just don't forget that the events will eventually be written over on the sensor.
Hope that helps.
Don
