# SIEM signals can not be closed with another status or comment except "Closed"

**URL:** <https://discuss.elastic.co/t/siem-signals-can-not-be-closed-with-another-status-or-comment-except-closed/242755>\
**Category:** SIEM\
**Created:** [July 27, 2020, 1:46pm UTC](https://discuss.elastic.co/t/siem-signals-can-not-be-closed-with-another-status-or-comment-except-closed/242755 "2020-07-27T13:46:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jan\_Kabelka](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jan_kabelka/32/72840_2.png) [@Jan\_Kabelka](https://discuss.elastic.co/u/Jan_Kabelka)\
**Post date:** [July 27, 2020, 1:46pm UTC](https://discuss.elastic.co/t/siem-signals-can-not-be-closed-with-another-status-or-comment-except-closed/242755/1 "2020-07-27T13:46:37Z")

</div>

Dear Elastic Team, we have started to work with your SIEM module. We have defined many detection rules. Signals generated based on these rules can be simply closed (signal.status: "Closed").

We would -of course - like to close signals with many another statuses or sub-statuses, e.g. False Positive, Low Impact, Duplicate etc. How can we do that? Based on these statuses/sub-statuses we would like to create dashboards with signal statistics. thank you in advance. Jan

---

<div class="post-metadata">

**Author:** ![Frank\_Hassanabad](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/frank_hassanabad/32/49255_2.png) [@Frank\_Hassanabad](https://discuss.elastic.co/u/Frank_Hassanabad)\
**Post date:** [July 27, 2020, 10:24pm UTC](https://discuss.elastic.co/t/siem-signals-can-not-be-closed-with-another-status-or-comment-except-closed/242755/2 "2020-07-27T22:24:39Z")

</div>

Hi @Jan_Kabelka and welcome to the forums!

At the moment you can only close them in a "closed" state. For community feature requests we always encourage people to open a ticket here:

> **[Build software better, together](https://github.com/elastic/kibana/issues/new?template=Feature_request.md)**
>
> GitHub is where people build software. More than 50 million people use GitHub to discover, fork, and contribute to over 100 million projects.

And the more times something is requested, and the more 👍 we get on tickets from other community members, the higher the feature usually rises in our backlog to work on.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 24, 2020, 10:34pm UTC](https://discuss.elastic.co/t/siem-signals-can-not-be-closed-with-another-status-or-comment-except-closed/242755/3 "2020-08-24T22:34:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.