Create auto-close rules

Use auto-close rules to close older AVITs automatically based on the filter conditions that you set.

Before you begin

Role required: sn_vul.app_manage_auto_close_rules

Procedure

1. Navigate to All > Application Vulnerability Response > Administration > Auto-close rules.

   The base system provides the following auto-close rules:

   Application Vulnerabilities last scanned Vulnerabilities not reported within the last 90 days are transitioned to Stale state.

2. Select New to create a new auto-close rule.

3. Fill in the fields on the form.

   Field	Value
   Name	Name of the auto-close rule.
   Active	Option to activate the rule. If activated, it closes any detections automatically that match its filter criteria.
   Execution order	Unique value for the execution of the auto-close rule. This value determines the order of execution. The default value is 100.
   Integration type	Application Vulnerability Integration
   Description	Description of the auto-close rule.
   Condition	Filter conditions used to identify detections that should be closed.

4. Select Submit.

   The Auto-close Rules Processor scheduled job runs on a nightly basis. It identifies AVITs based on the specified conditions and transitions the matching ones to the Stale state. In cases where there are AVITs with both "Closed" and "Stale" statuses, the AVIT is closed with the sub-state set as Fixed.

Parent Topic:Application Vulnerability Response remediation tasks and task rules overview