Start Demo

Create an exclusion interval for alerts

Exclusion intervals define a time in which alerts are suppressed. For example, if you do not want to be notified about alerts after hours or on the weekends, create an exclusion interval that specifies the time period to suppress alerts. After you create the exclusion interval, you can assign it to one or more alert configurations.

  1. Log into the Web UI on the ExtraHop Discover or Command appliance.
  2. Click the System Settings icon and then click Alerts.
  3. Click the Exclusion Intervals tab, and then click New.
  4. Enter a unique name for the exclusion interval in the Name field.
  5. (Optional): In the Assign to All section, you can assign the exclusion interval to all alert configurations or only to trend alert configurations.
    • To assign the exclusion interval to all existing and future alert configurations, click Alerts .
    • To assign the exclusion interval to all existing and future trend alert configurations, click Trend.
  6. From the Exclude section, specify one of the following time frame options for the exclusion interval:
    • To set a one-time exclusion interval, select From.
    • To set a daily exclusion interval, select Every day.
    • To set a weekly exclusion interval, select Every week from.
  7. Click OK.

Assign an exclusion interval to an alert

Assign one or more exclusion intervals to an alert configuration to suppress generation of alerts during a specified time frame.

Before you begin

You must configure an alert before you assign an exclusion interval. See Configure threshold alert settings, Configure trend alert settings, or Configure detection alert settings.
  1. Log into the Web UI on the ExtraHop Discover or Command appliance.
  2. Click the System Settings icon and then click Alerts.
  3. Click the alert configuration you want to open in the Alert Configuration window.
  4. Click the Exclusion Intervals tab.
  5. Select the checkbox next to each exclusion interval you want to assign to the alert.
  6. Click OK.

View the exclusion interval history

The exclusion interval history displays the last 100 changes made to exclusion interval configurations.

  1. Log into the Web UI on the ExtraHop Discover or Command appliance.
  2. Click the System Settings icon and then click Alerts.
  3. Click the Exclusion Intervals tab, and then click the History tab.
    The tab displays the following information:
    Change
    Displays the change that was made to the exclusion interval.
    Author
    Displays the author of the change.
    Timestamp
    Displays when the change was made.
  4. Click OK to close the window.
Published 2020-03-26 01:03