App Control: Is it possible to set a filter in an email alert to exclude devices that are in Report Only Mode?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Is it possible to create an email filter to filter out block events from endpoints in Report Only Mode?

Environment

• App Control (formerly CB Protection): All supported versions

Resolution

No, currently there is no mechanism in place to filter email alerts to exclude endpoints in Report Only Mode