Posture Control (DSPM)
About Ignore Alert Filters
The ignore alert filter allows you to exclude the generation of alerts for less critical violations. By adding an ignore alert filter, you can avoid receiving notifications or taking actions on such policy violations. When you add an ignore alert filter, DSPM stops generating alerts for the selected filter scope, and notifications aren't sent to any third-party integrations. This allows you to focus on critical alerts and prioritize them. For example, you can add an ignore alert filter to exclude alerts that are generated for policies with low severity or for a specific cloud account.
The ignore alert filter provides the following benefits and enables you to:
- Ignore alerts that you do not want to be notified for or take action on.
- Reduce the number of alerts in the DSPM Admin Portal.
- Focus on critical alerts.
About the Ignore Alert Filter Page
On the Ignore Alert Filter page (Alerts > Alert Settings > Ignore Alert Filter), you can do the following:
- Add an ignore alert filter.
- View the list of ignore alert filters. For each filter, you can see:
Alert Filter Name: The name of the ignore alert filter. Click to view additional details. You can also edit, delete, enable, or disable the filter.
Filter Scope: The scope (business unit, policy, tags, etc.) selected for the ignore alert filter.
- If the selected scope is deleted (e.g., policies are deleted, accounts are offboarded, or the business unit is deleted), the ignore alert filter is disabled, and an exclamation mark is displayed indicating the alert filter is invalid. See image. Click the alert filter name to see the reason why the ignore alert filter is disabled. See image.
- You can enable the filter only after at least one filter scope is available.
- If multiple policies, accounts, or resource types are selected for the filter scope and only one of them is deleted, the ignore alert filter is not impacted.
- Created By: The user who created the filter.
- Created Date: The date and time the filter was created.
- Updated By: The user who updated the filter.
- Last Updated: The date and time the filter was updated.
- Search for a specific ignore alert filter.
- Sort the column data.
- Modify the table and its columns.
Enable or disable the ignore alert filter.
By default, the ignore alert filter is enabled.
- Edit or delete the ignore alert filter.
