How to whitelist or silence an Entity
Sometimes, entities have legitimate reasons to engage in transactions that would get flagged by a rule. For example, a VIP user might be allowed to transact larger amounts than most.
In these cases, you can add the entity to a whitelist, which excludes their transactions from alerts.
There are two approaches to whitelisting.
- Granular: you can whitelist an entity from a specific rule. In this case, the entity is excluded for alerts from a specific rule.
- Global: you can whitelist a particular entity from all alerts for all rules.
How to stop models from generating alerts for particular entities:
To whitelist entities on a per rule basis, follow these steps.
- Head to the Detection Models page:
![Screen Shot 2023-01-23 at 1.38.25 PM.png 1859](https://files.readme.io/a9fe56a-Screen_Shot_2023-01-23_at_1.38.25_PM.png)
- Select a live model from the list:
![Screen Shot 2023-01-23 at 1.40.00 PM.png 1859](https://files.readme.io/d0e42f9-Screen_Shot_2023-01-23_at_1.40.00_PM.png)
- Open the Whitelist tab:
![Screen Shot 2023-01-23 at 1.40.10 PM.png 1859](https://files.readme.io/f3f9bbb-Screen_Shot_2023-01-23_at_1.40.10_PM.png)
- Use the dropdown to select entities by
id
,business name
,user name
, oremail address
.
![Screen Shot 2023-01-23 at 1.40.59 PM.png 1859](https://files.readme.io/dc914d3-Screen_Shot_2023-01-23_at_1.40.59_PM.png)
- Start typing your entity name. Once the entity is found, select it.
![Screen Shot 2023-01-23 at 1.41.34 PM.png 1859](https://files.readme.io/b3354d9-Screen_Shot_2023-01-23_at_1.41.34_PM.png)
- Click the button Add to Rule <id>'s Whitelist.
![Screen Shot 2023-01-23 at 1.41.45 PM.png 1859](https://files.readme.io/937c5d7-Screen_Shot_2023-01-23_at_1.41.45_PM.png)
This action can be either temporary or indefinite.
![Screen Shot 2023-01-23 at 1.42.24 PM.png 1859](https://files.readme.io/ce9456a-Screen_Shot_2023-01-23_at_1.42.24_PM.png)
In this case, the entity is whitelisted for only the transactions that get flagged by the specified rule. If the entity engages in transactions that break a different rule, they will be flagged.
- Click Add to Rule:
![Screen Shot 2023-01-23 at 1.43.03 PM.png 1859](https://files.readme.io/648f201-Screen_Shot_2023-01-23_at_1.43.03_PM.png)
You can also do this from an entity's pane:
Just click on the Rule Silencing tab and manually add rules.
How to stop all alerts for a particular entity:
- Head over to the Data Explorer.
![Unit21-Whitelist-Entity-0.png 2672](https://files.readme.io/9a6dcaa-Unit21-Whitelist-Entity-0.png)
- Click on the entity to see the overview, then choose Go to Detail Page:
![Unit21-Whitelist-Entity-1.png 5344](https://files.readme.io/64b6302-Unit21-Whitelist-Entity-1.png)
- Select the Rule Silencing tab.
![Unit21-Whitelist-Entity-2.png 5344](https://files.readme.io/7a9e901-Unit21-Whitelist-Entity-2.png)
- Choose Silence all rules and select the amount of time to allowlist the entity.
![Unit21-Whitelist-Entity-3.png 5344](https://files.readme.io/cccd7ef-Unit21-Whitelist-Entity-3.png)
![Unit21-Whitelist-Entity-5.png 5344](https://files.readme.io/4d740bd-Unit21-Whitelist-Entity-5.png)
The duration can be indefinite, or within the range from 3 days
to 3 months
.
Since this action can be either temporary or indefinite. When it's temporary, you can think of it like hitting an the "snooze" button for an entity's alerts. For this reason, sometimes the action is referred to as rule silencing in the UI.
Updated 8 months ago