Exclude patterns from learned patterns

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 2분

    • Exclude CI-based or CI class-based alerts and patterns when you encounter alerts incorrectly added to a learned pattern by the Learned Patterns job. For example, a pattern might include an alert that occurred at the same time as other alerts but is not actually related to them. This maintains accuracy, ensuring better alert groupings and improved management efficiency.

    시작하기 전에

    Role required: evt_mgmt_admin

    이 태스크 정보

    You select the incorrect alert in a pattern to exclude the entire pattern to which it belongs.
    주:
    When you exclude an incorrect alert, any other patterns containing that alert are also excluded.

    프로시저

    1. Navigate to All > Event Management > Reporting > Learned Patterns.
      Exclude pattern navigation
    2. On the Learned Patterns page, expand the anomalous pattern.
      Expanded patterns
    3. Select the pattern name to open it for exclusion.
    4. On the SA Alert Aggregation Learned Pattern page, select Exclude.
      Option to exclude the selected pattern

    결과

    The entire pattern is removed from the Learned Patterns report and listed on the Excluded Patterns page, located at Event Management > Administration > Excluded patterns.

    If the pattern includes other alerts, you can restore it by reclaiming those alerts as a learned pattern. For further details, see Restore excluded patterns.