Whitelisting

Sandfly is written to have an extremely low chance of false alarms. However, in some environments you may have a configuration that can cause a sandfly to alert repeatedly when it should not.

The whitelisting feature allows you to define rules that apply to either all hosts or individually selected hosts and/or host tags and which either disables a sandfly from running or converts the alert into a pass result. The next two pages cover whitelisting from the UI in more detail.