The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Delete the snort rules from the database

Prev Next

Whenever required, you can delete the snort rules from the database and stop the Sensors from sending alerts:

Steps:

  1. Open the Custom Attack Editor.

  2. All the custom rules in the database are listed.

  3. Select the required rules, click and select GUID-15AADF4D-7927-4A0E-96E9-69CF820F0712-low.png.

  4. Click Save to save the changes and update the policies.

  5. Update the Sensors of the configuration changes.