Create Findings Purge Rules
The purpose of purge rules is to clean up and remove outdated or irrelevant findings. Define conditions under which findings should be purged from the system based on specific source, connector id, name or last detected, first detected, and so on. This helps maintain an up-to-date and relevant security posture.
Currently, we support purging the findings form third party sources.
Complete the following steps to create a new rule:
- Go to Risk Management > Findings Rule > Purge > Create Rule.
- Provide the rule name and rule description.
- From Criteria Section, select Third Party Sources.
- Select Attribute, Operator and Value for the attribute.
- Click
to add more attributes.
You can add up to 5 attributes.
- To view the details of your criteria and findings, click Preview.
- Schedule your rule to Run Once when enabled or scheduled to Run Daily.
- To save the rule, click Create.
Good to Know!
You can edit, delete, enable, or disable the purge rule from the Quick Actions menu. You can also download the purge rule execution report.
