cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
872
Views
0
Helpful
1
Replies

False Positive

thomasandy32
Level 1
Level 1

Hello,

I Can't see any

  • Unconfirmed false positives

  • User-confirmed false positives

  • User-confirmed false-positive type

  • System-determined false-positive type

  incidents in false positive TAB,then why they are seen in  INCIDENT TAB as a false positive.

Here is the attached pls have a look.

1 Reply 1

Mykola Srebnyuk
Level 1
Level 1

Hi,

In incident tab clicking on false positive icon you can configure this incident as false positive.

Please read at first configuration guide. All this are described in it.

Sincerelly yours,

Cisco MARS

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: