How to modify settings of clisur ? It is an unnecessary creating alerts

InsightIDR Alerts
1

How do I modify the settings of clisur? It is unnecessary to create alerts.

2

What is this exactly? Can you share some more context on the alert that is firing?

3

The CLIUSR account is a local user account created by the Failover Clustering feature when it is installed on Windows Server 2012 or later.
https://techcommunity.microsoft.com/t5/failover-clustering/so-what-exactly-is-the-cliusr-account/ba-p/388832

4

So are you seeing the local account created alert in that case? The only options for the Legacy UBA alert currently is the Modify and Close options, or if this is a migrated Detection rule you will have the exception rule building experience which is available to all of the newer (non legacy) rules.

David