You can use the suppress event feature in UMC for Symantec Data Center Security Server (SDCS) to stop an event from being reported to the manager.
You can suppress an event by logging into the UMC selecting server then monitor and prevention, then select the event and click suppress event.You want to know when an event is suppressed how long does the suppression last and how does one undo the suppression.
Suppressions are permanent unless one take steps to remove them. Suppressions are written to the configuration file. To remove the suppression apply a new configuration file or move the agent to a different security group.