Hi,

I have multiple Linux VMs that run packet captures daily, and I use Vision One for monitoring. I've noticed that many Workbench alerts are triggered whenever these PCAPs run, which is generating a lot of noise.

Is there a way to suppress these alerts while ensuring that other important detections remain unaffected? Any best practices or recommended configurations would be greatly appreciated.

Thanks!