Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here

Skyhigh Security

Activate and Deactivate a Custom Anomaly

Activate a Custom Anomaly

IMPORTANT: A maximum of 5 custom anomalies can be activated on the Anomaly Settings page. If the maximum limit is reached, the Active Custom Anomaly Limit message will be displayed. In that scenario, deactivate a Custom Anomaly before you can activate another one.

 

The users can activate the inactive or disabled custom anomaly to resume anomaly detection. If an anomaly is detected, incidents are triggered on the Anomalies page.

To activate a custom anomaly:

  1. Go to Incidents > Anomalies > Anomaly Settings.
  2. Select the required custom anomalies that are inactive or disabled. Multiple custom anomalies can be selected. 
  3. Click Actions > Activate Anomaly.
    clipboard_e0e2ad7b9d792e439d4fe934edbcd417e.png
  4. Now, the selected anomaly is activated and you can view the status changed from Inactive to Active.
    clipboard_e2ee409e29d23cf9341609b6fd34d9f6a.png

Deactivate a Custom Anomaly

The users can deactivate the active custom anomaly to stop anomaly detection. The deactivated custom anomaly does not trigger any incidents on the Anomalies page.

To deactivate a custom anomaly:

  1. Go to Incidents > Anomalies > Anomaly Settings.
  2. Select the required custom anomalies that are active or disabled. Multiple custom anomalies can be selected. 
  3. Click Actions > Deactivate Anomaly.
    clipboard_e551e2191c06e98ed37a56ed643f28c8f.png
  4. Once you see the confirmation dialog, click Deactivate.
    clipboard_e7f525d92bf75879d1393d95f965f50c4.png
  5. Now, the selected anomaly is deactivated and you can view the status changed from Active to Inactive.
    clipboard_e7d08f4fb4feff448a2443f7b0aac7a2d.png
  • Was this article helpful?