Palo Alto Networks Knowledgebase: How long does it take for a Prisma Cloud alert to disappear after a policy is changed?

How long does it take for a Prisma Cloud alert to disappear after a policy is changed?

806
Created On 08/02/19 18:31 PM - Last Updated 08/02/19 18:32 PM
Redlock
Question
Once you update a config based policy query, how long does it take to auto resolve the alerts that no longer match this policy. 

Answer
When a config based policy query is changed, the next scan will re-evaluate all of the Alerts generated by this policy. If any of the Alerts are no longer valid because of the change in the policy, then they will be auto-resolved.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmbUCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments