Rejecting Policy Recommendations (SOAR Action in ServiceNow)

Use this SOAR action to reject policy recommendations for the policy that is associated with the alert.

• This SOAR action can be run from an alert, and can be performed on one recommendation at a time.
• The Reject Policy Recommendations action is available in the related actions in the related list of Alerts.
• After the successful execution of the action:
  • The recommendation state changes from NEW to REJECT.
  • The entered comment is stored.
  • The recommendation will be in the Reviewed state in the Carbon Black Cloud portal.
  • The recommendation record in the Alert Recommendation record is removed.