Mar 01 2022 02:13 AM
Hello Everyone,
We can create API to create exclusion in CM based on different parameters like ttl, engines,SensorIds, subnets. However, giving ttl is mandatory otherwise exclusion can't be created.
But I want to create permanent(Without giving any TTL) exclusion for all sensors on my side for specific servers in all sensors except Malware engine.
Maybe we can create exclusion based on certain TTL values and make that API run at specific time interval to get the time TTL updated. Can we do this in CM ? I meant to say that can we schedule it in CM?
Any thought or other ideas based on the above requirement or scenario
Apr 05 2022 11:09 PM
Apr 06 2022 04:44 AM
Can you double check because I tested multiple times but it doesnt allow.TTL is mandatory while using API.
I wanted if TTL not mentioned it should be always
Apr 06 2022 05:05 AM
Apr 06 2022 07:08 AM
But I think by design its mandatory which I dont want.
You can check internally for the same until we discuss it offline