Skip to content

Commit 26c7a06

Browse files
committed
fixed the important note messaging
1 parent d5a0d26 commit 26c7a06

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

CloudAppSecurityDocs/cloud-discovery-policies.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -76,8 +76,8 @@ Defender for Cloud Apps searches all the logs in your cloud discovery for anomal
7676
:::image type="content" source="media/apply-to-continous-reports.png" alt-text="Screenshot showing how to apply file polcies to specific continous reports" lightbox="media/apply-to-continous-reports.png":::
7777

7878
> [!IMPORTANT]
79-
> When configuring an app discovery policy, selecting Apply to > All continuous reports generates an alert for each discovery stream separately. Since this option includes a global stream (an aggregate stream combining data from all your discovery sources, such as Defender for Endpoint, Log Collector, Zscaler, proxies, etc.), you may receive multiple alerts for the same event—one for the global stream and one for each specific discovery source.
80-
To avoid receiving duplicate alerts, select Apply to specific continuous reports, and explicitly choose only the streams relevant to your monitoring requirements.
79+
> When configuring an app discovery policy, selecting Apply to > All continuous reports generates individual alerts per discovery stream. Because this selection includes the global stream, which aggregates data from all discovery sources (such as Defender for Endpoint, Log Collector, Zscaler, and proxy services), you may see duplicate alerts—one from the global stream and additional alerts from each individual source.
80+
> To prevent duplicate alerts, select Apply to > Specific continuous reports, and choose only the streams relevant to your policy objectives.
8181
8282
1. Select the dates during which the anomalous activity occurred to trigger the alert under **Raise alerts only for suspicious activities occurring after date.**
8383

0 commit comments

Comments
 (0)