Edit finding exclusion rules Edit details for a finding exclusion rule, including field matching, notes, and more.In Splunk Enterprise Security, select Configure then Findings and investigations.Select Finding exclusion rules.Select the edit icon ( ) for a finding exclusion rule in the table.Make your changes.Select Save.