How do I modify the settings of clisur? It is unnecessary to create alerts.
What is this exactly? Can you share some more context on the alert that is firing?
The CLIUSR account is a local user account created by the Failover Clustering feature when it is installed on Windows Server 2012 or later.
https://techcommunity.microsoft.com/t5/failover-clustering/so-what-exactly-is-the-cliusr-account/ba-p/388832
So are you seeing the local account created alert in that case? The only options for the Legacy UBA alert currently is the Modify and Close options, or if this is a migrated Detection rule you will have the exception rule building experience which is available to all of the newer (non legacy) rules.
David