am running an instance where am still experimenting with rules
am getting a lot of false alerts that i want to delete before push production
thanks
am running an instance where am still experimenting with rules
am getting a lot of false alerts that i want to delete before push production
thanks
Thanks for reaching out, @Haitham1. Would using the bulk actions API work for you? Our documentation on managing alerts could also be helpful here.
Hello @Haitham1
Alerts can be closed using API: Signals endpoint | Elastic Security Solution [8.15] | Elastic
Or through UI: Manage detection alerts | Elastic Security Solution [8.15] | Elastic
After closing, alerts won't appear in alerts table anymore
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.