Edit finding exclusion rules

Edit details for a finding exclusion rule, including field matching, notes, and more.
  1. In Splunk Enterprise Security, select Configure then Findings and investigations.
  2. Select Finding exclusion rules.
  3. Select the edit icon ( ) for a finding exclusion rule in the table.
  4. Make your changes.
  5. Select Save.