Excluding—If the Administrator processed this item and added it as an exclusion to the rules. This status remains till the next synchronization of the client device with the Administration Server; after the synchronization, the item disappears from the list.
Confirming—If the Administrator processed this item and confirmed it. This status remains till the next synchronization of the client device with the Administration Server; after the synchronization, the item disappears from the list.
Empty—If the Administrator did not process this item.
In the main menu, go to Operations → Repositories → Triggering of rules in Smart Training state.
Do one of the following:
In the Name column, click the link with the name of the detection you want to view.
In the list of detections, select the check box next to the detection you want to view, and then click the Properties button.
The properties window of the selected detection opens, displaying information about it.
You can confirm any detection from the list of detections of Adaptive Anomaly Control rules or from the properties window of a selected detection.
To confirm a detection:
Select one or several detections in the list of detections, and then click the Confirm button.
Open the properties window of a selected detection, and then click the Confirm button.
The status of the detection is changed to Confirming. The detection will disappear from the list of detections after the next synchronization of the client device with the Administration Server.