Suppressing and unsuppressing alerts

This topic explains how to manage alerts by suppressing and unsuppressing them.

Suppress (mute) an alert

If you need to suppress an alert due to a false positive, acknowledged risk, or any other reason, follow these steps:

Do the following:

  1. Locate the Security Issue whose alert you want to suppress.

  2. In the 'Actions' column of the alert you wish to manage, click on the Bell icon. The Select Suppression Level popup appears.

  3. Choose one of the following suppression levels:

    • Suppress this specific alert only: Choose this to silence only the current instance of the alert without affecting any future alerts of the same type.

    • Suppress all alerts generated by the same rule: Select this to mute all alerts triggered by the same rule, effectively blocking the rule from generating further alerts.

    • Suppress all alerts for this particular resource: Opt for this to mark the resource as safe, which will suppress all alerts related to it.

  4. Click Suppress to confirm your action. The Alert bell(s) display as .

Unsuppress (mute) an alert

If an alert has been previously suppressed and you wish to re-enable notifications for it, you can easily unsuppress it by following these instructions:

Do the following:

  1. In the 'Actions' column of the alert you wish to manage, click on the Bell icon. The Confirm Unsuppression Level pop-up appears.

  2. Choose one of the following:

    • Unsuppress this specific alert only: Choose this option if you wish to receive notifications for the current alert instance while keeping future alerts of the same type suppressed.

    • Unsuppress all alerts generated by the same rule: Select this to re-enable notifications for all alerts generated by this rule, effectively unblocking the rule.

    • Unsuppress all alerts for this particular resource: Opt for this to remove the safe designation from the resource, which will allow all alerts related to it to be reactivated.

  3. Click Unsuppress to confirm your action. The Alert bell(s) display as .

Delete all alert suppressions for a specific account

Permanently delete all your alert suppressions for a specific account.

Do the following:

  1. Select the account in single-account view.

  2. Click on your username and select the My Account option. This will take you to the account page.

  3. Click Delete all suppressions.

  4. Confirm your action to permanently delete all alert suppressions for the account.