Whitelist a Case

1. Log in to the LogRhythm NDR UI.
2. Click the System tab, and then click Cases.
   The Cases page appears, displaying a list of cases in the table.
3. Click the timestamp for any case in the table.
   The Cases / Details window page appears, displaying the Action drop-down menu in the upper-right corner.
4. Click Action, and then click Whitelist.
   The Add Whitelist Entry Rule dialog box appears, populated based on the information from the case.
5. Select the checkboxes for the entry items you want to add to the whitelist, then click Selected Whitelist Entry.
   The selected items appear. 
6. Click Add.
   The Inserting Whitelist dialog box appears.
7. Click OK.

×