Thanks for the reply-------------------------------------------
Original Message:
Sent: Jan 14, 2021 09:01 PM
From: Robert Evans
Subject: Exception Rule not working
Hi Muhammad,
The operator contains is checking for an exact string match where Info URL contains the string literal "teamviewer.com, digicert.com", it is not treating this as a list.
You could probably do this two ways.
Probably the most reliable way to exclude:
Info URL CONTAINS teamviewer.com OR
Info URL CONTAINS digitcert.com
An alternative is to try:
Info URL IN "teamviewer.com","digicert.com" -- Where the IN is an exact match of the info url. e.g. teamviewer.com won't match test.teamviewer.com or test2.teamviewer.com
Original Message:
Sent: Jan 14, 2021 07:36 PM
From: Muhammad Hafiz Safwan Bin Jasmi
Subject: Exception Rule not working
Hi Guys,
I try to create exception rule by clicking incident -> Action > Edit Rule Exception.
but it still trigger the incident. Any ideas?
