Create anomaly alert promotion rule blacklist

You can create a blacklist of CIs to be excluded from promotion to regular alerts. Alerts related to the CIs in the blacklist would otherwise be promoted to regular alerts by an anomaly alert promotion rule.

Before you begin

Anomaly alert promotion rules must exist, otherwise, blacklist CIs have no effect.

Role required: evt_mgmt_admin

About this task

Anomaly alert promotion rules promote anomaly alerts to regular alerts. Alerts generated by CIs that are included in the blacklist, are not promoted even if they satisfy the anomaly alert promotion rule filter.


  1. Navigate to Operational Intelligence.
  2. Open the Alert Promotion Rules Blacklist:
    • Select Anomaly Alerts, right-click an alert in the Alert Anomalies list, and select Blacklist CI.
    • Select Anomaly Alert Promotion CIs Blacklist, and then click New or open an existing rule.
  3. Fill in the fields, as appropriate.
    Field Description
    Configuration item The CI from the alert, that is to be added to the CIs blacklist.
    Source Data source of the alert.
  4. Click Submit.