Exclude Integration User from Pulse Thread Cancelling

Pulse Pulse Questions
1

Hi experts,

We are using Pulse alerts to cancel long running threats. We want to exclude TIs that are run by an integration user from Python.

Can we use the ‘Filter’ & ‘Exclude’ feature for that? How this work or where do we find documetation?

image
image574×653 17.5 KB

Best regards,
Kevin

2

Hi @kdekker,

You can test exclude by Context,

image

I think TM1Py has one setup too. You can test by running Bedrock’s Server Wait TI process for example.

Cheers!

Paul

1 Like