Track Anomaly Information
- Select Administration > System Settings.
- From the System Settings menu, select Anomaly Configuration.
- Select settings:
Section/Field Description Suppress Geoanomalies by - Click the field to the right of the Cloud Account field.
- Select Connected Apps.
- From the Directories list, click the folders for the apps to suppress.
- Click the right arrow to move them to the Connected Apps column.
- Enter the IP Addresses and Email Addresses for which to suppress anomaly information. In each field, separate multiple IP and email addresses with commas.
Activities for Geoanomaly Search for the activities to track for geoanomalies, select the activities, and click Apply.
For anomalies to be triggered for Office 365 and AWS, you must check
O365Audit and AWSAudit from the list.
Geoanomaly For Minimum Geoanomaly Distance, enter the minimum number of miles for which to track geoanomalies, or accept the default of 300 miles.
Adaptive Rate Limiting (Preview) Enter or select the following options that will apply to the tenant:
▪ Probability Variation from Peak, as a percentage (default is 50%)
▪ Consecutive Failure Rate for Non-Compliance (default count is 3)
Clear Geoanomalies Click Clear to clear previously reported geoanomaly information. After you click Clear, the date and time at which the geoanomalies were last purged appears below the Clear button.
- Click Save.
