Create an exclusion rule

---
title: Create an exclusion rule
description: Create a rule to filter or exclude detections from getting converted into vulnerable items \(VITs\) during ingestion.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-exclusion-rule.html
release: brazil
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Vulnerability Response remediation overview, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Create an exclusion rule

Create a rule to filter or exclude detections from getting converted into vulnerable items \(VITs\) during ingestion.

## Before you begin

Role required: Vulnerability admin

## About this task

## Procedure

1.  Navigate to **All** > **Vulnerability Response** > **Exclusion Rules**.

2.  On the Exclusion Rule record page, select **New** to create a rule.

    \[Omitted image "create-exclusion-rule.png"\] Alt text: Create exclusion rule

    A message saying 'Enable property to automatically close vulnerable items when all associated detections are closed' is displayed. By default, the property is inactive. To enable, select the property link and enter the value as True in the **Value** field.

3.  On the form, fill in the fields.

<table id="table_tqk_fb3_4mb"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Name

</td><td>

Name of the exclusion rule.

</td></tr><tr><td>

Active

</td><td>

Option to activate the exclusion rule.

</td></tr><tr><td>

Execution order

</td><td>

Unique order for each exclusion rule.

</td></tr><tr><td>

Condition

</td><td>

Filter conditions for the detections that can be defined while processing them.**Note:** You can’t select Exclusion rule or Vulnerability item field conditions.

</td></tr><tr><td>

Description

</td><td>

Description of the exclusion rule.

</td></tr></tbody>
</table>4.  Select **Submit**.

    The activity is recorded in the system.

    **Note:** Once an exclusion rule is created, it takes effect on detections starting from the subsequent ingestion.