Thresholds for Shadow Service anomalies are customized to every customer’s user base and are specific to the user-action (download, upload) and cloud service provider combination. Some thresholds can be overridden directly from Skyhigh CASB. This should not be confused with the process of Adjusting Sanctioned Service Anomaly Thresholds.
To adjust Shadow Service Anomaly Thresholds:
- Go to Incidents > Anomalies > Shadow Anomalies.
- Click the Pencil icon in the Action column of the anomaly you wish to adjust.
- You can view the Adjust Threshold popup. Set the desired threshold.
NOTE: This adjusts only the threshold for the anomalies occurring in the selected Shadow service. To adjust the threshold for all services, repeat this process for all detected services.
- To save your defined threshold, click Set Threshold.