App Control: Is it possible to set a filter in an email alert to exclude devices that are in Report Only Mode?
book
Article ID: 287339
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
Is it possible to create an email filter to filter out block events from endpoints in Report Only Mode?
Environment
- App Control (formerly CB Protection): All supported versions
Resolution
No, currently there is no mechanism in place to filter email alerts to exclude endpoints in Report Only Mode
Feedback
thumb_up
Yes
thumb_down
No