- Log in to the LogRhythm NDR UI.
- Click the System tab, and then click Cases.
The Cases page appears, displaying a list of cases in the table.
- Click the timestamp for any case in the table.
The Cases / Details window page appears, displaying the Action drop-down menu in the upper-right corner.
- Click Action, and then click Whitelist.
The Add Whitelist Entry Rule dialog box appears, populated based on the information from the case.
- Select the checkboxes for the entry items you want to add to the whitelist, then click Selected Whitelist Entry.
The selected items appear.
- Click Add.
The Inserting Whitelist dialog box appears.
- Click OK.