Manage Exclusions

Exclusions allow you to create rules that automatically ignore certain AI alerts. For example, you may have a known false positive that you no longer want to see in your list of open issues. You can create an Exclusion rule to hide them from your future issues and alerts throughout the Tenable AI Exposure interface.

On the Exclusions page, you can manage your Tenable AI Exposure exclusion rules in the following ways:

Create an Exclusion

To create an exclusion:

1. On the Exclusions page, in the upper-right corner, click Add exclusion rule.

   The Add exclusion rule panel appears.

   

2. From the Policy drop-down, select the policy you want to apply to the exclusion rule.

   Tip: For more information about policies and their related detection rules, see Tenable AI Exposure Policies and Detection Rules.

3. From the Detection rule drop-down, select the rule type you want to use for detection.

   Note: The options in this drop-down depend on your selection in the Policy drop-down.

4. In the Exclusion type section, select one of the following options:

   • Exact match — The rule only excludes issues that match the keyword or phrase text exactly.

   • Wildcard — The rule excludes multiple variations of a keyword or string.

5. In the Exclusion rule text box, do one of the following:

   • For Exact match exclusion rules — Type the specific keyword or phrase you want to exclude.

   • For Wildcard exclusion rules — Type the wildcard pattern to exclude.

     Tip: You can use the following wildcard characters:

     • * (Asterisk): Matches any number of characters, including none.

     • ? (Question Mark): Matches exactly one character.

     Example wild card patterns:

     • *@tenable.com - Excludes all email addresses from the tenable.com domain, such as [email protected].

     • admin*@company.com - Excludes any email that starts with admin and ends with @company.com, like [email protected].

     • 192.168.*.* - Excludes all IP addresses in the range 192.168.x.x, like 192.168.1.1 or 192.168.100.255.

     • file_??.log - Excludes filenames like file_01.log, file_AB.log, where the ? matches any two characters.

6. (Optional) Click Add another exclusion rule to add additional rules to the exclusion.

7. Click Add exclusion.

   Tenable AI Exposure creates the exclusion, adds it to the Exclusions list, and begins excluding the selected criteria from your issues and alerts.

Edit an Exclusion

To edit an exclusion:

1. On the Exclusions page, in the exclusions list, click the exclusion rule you want to edit.

   The Edit exclusion rule panel appears.

   

2. Make your desired changes.

3. Click Save.

   Tenable AI Exposure saves your changes to the exclusion rule.

Delete an Exclusion

To delete an exclusion:

1. On the Exclusions page, in the exclusions list, hover over the exclusion rule you want to delete.

   On the right side of the row, a button appears.

2. Click the button.

   A confirmation message appears. Tenable AI Exposure removes the rule from the Exclusions list, and stops excluding the selected criteria from your future issues and alerts.