To decrease false positives, you can ignore traffic from known traffic sources (such as internal scanners) under a specific Flock.
Follow the steps below to add known traffic source IPs to the ignore list under your Flock:
Step 1: Log in to the Console
Step 2: Choose Your Flock
Select the Flock you'd like to add an exclusion to.
We are selecting Default Flock.
Step 3: Open Flock Settings
Click on the Gear Icon under the Flock page.
Step 4: Go to the Alerts Section
- Scroll down to the Alerts section.
- Click On under the Ignore these IPs option
Step 5: Add IP Address to Ignore List
- Add the single IP Address to the Flock Ignore list.
- Click Save to apply the exclusion.
Optional (Global Ignore List)
By default the Flock will be set to Global ignoring the IP addresses specified in the global ignore list. If you would like to ignore a specific IP within a Flock and ignore the IP's specified in the global ignore list, follow the steps below:
- Enable Inherit Globally Ignored IPs to include the global ignore list.
- The global ignore list will be displayed here.