Skip to content

Commit e06b261

Browse files
committed
reworded the important note about multiple alerts
1 parent cb2845a commit e06b261

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

CloudAppSecurityDocs/cloud-discovery-policies.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -76,9 +76,8 @@ Defender for Cloud Apps searches all the logs in your cloud discovery for anomal
7676
:::image type="content" source="media/apply-to-continous-reports.png" alt-text="Screenshot showing how to apply file polcies to specific continous reports" lightbox="media/apply-to-continous-reports.png":::
7777

7878
> [!IMPORTANT]
79-
> When configuring an app discovery policy, selecting Apply to > All continuous reports generates individual alerts for each discovery stream. This includes the global stream, which aggregates data from all discovery sources, resulting in multiple alerts. One from the global stream and additional alerts from each individual source.
80-
> To prevent multiple alerts, select Apply to > Specific continuous reports, and choose only the streams relevant to your policy.
81-
> To learn more see: [Defender for Cloud apps continuous risk assessment reports](set-up-cloud-discovery.md#snapshot-and-continuous-risk-assessment-reports)
79+
> When configuring an app discovery policy, selecting **Apply to > All continuous reports** generates individual alerts for each discovery stream, including the global stream. This results in multiple alerts, one from the global stream and additional alerts from each individual source. To customize your alerts, select **Apply to > Specific continuous reports** and choose only the relevant streams for your policy.\
80+
> Learn more: [Defender for Cloud apps continuous risk assessment reports](set-up-cloud-discovery.md#snapshot-and-continuous-risk-assessment-reports)
8281
1. Select the dates during which the anomalous activity occurred to trigger the alert under **Raise alerts only for suspicious activities occurring after date.**
8382

8483
1. Set a **Daily alert limit** under **Alerts**. Select if the alert is sent as an email. Then provide email addresses as needed.

0 commit comments

Comments
 (0)