Core Modules
Excluding anomalous dates from dashboard calculations
Not every day of scan activity is worth counting. A misconfigured scanner, a one-off bulk import, or a mass-remediation event can spike a single day's numbers so far out of line that it distorts trends for everyone. Date Exclusions is an administrator setting that lets you review activity day by day and exclude the days that don't represent real, ongoing risk — so dashboard trends and totals stay meaningful.
In the left navigation, under Exposure Management → Date Exclusions (administrators only).
What it's for
- Spot anomalies automatically — each day is scored for how unusual its activity is, so unreliable days surface without you having to hunt for them.
- Exclude a day with one toggle — remove a day's numbers from dashboard calculations without deleting any underlying data.
- Handle a bad stretch in bulk — exclude every detected anomaly at once instead of reviewing days one at a time.
- See exactly why a day was excluded — a reason is recorded and shown alongside the date.
The controls
| Control | What it does |
|---|---|
| Days Loaded / Excluded / Anomalies | Summary counts at the top: how many days are loaded for the selected range, how many are currently excluded, and how many are flagged as anomalies. |
| Time range | Loads daily activity for 7d, 30d, 60d, 90d, 180d, 1 yr, or a Custom range with From and To date pickers. |
| Status filter | Narrows the table to All, Anomalies, Excluded, or Included days, each with a live count. |
| Exclude All Anomalies | Appears when anomalies are detected in the loaded range. Excludes every anomalous day in one action, after a confirmation step. |
| Date row | Each row shows the date, its day of week, and (if excluded) the recorded reason. |
| Status badge | Shows Excluded, High Anomaly, or Anomaly with a score, or a dash if the day is normal. |
| New Vulns (C / H / M / L) | New findings detected that day, broken down by Critical, High, Medium, and Low severity. |
| Remediated | Findings closed out that day. A high volume note appears when the count is unusually large. |
| Included toggle | Turns a single day on (included in dashboard calculations) or off (excluded). |
Common workflow — clean up a spike before it skews your trends
-
Open Exposure Management → Date Exclusions.
-
Set the time range to cover the period you're investigating — for example 90d.
Step 1 — loading the last 90 days of activity -
Click the Anomalies status filter to see only the flagged days.
-
Review each flagged day's New Vulns and Remediated counts to confirm it's a genuine outlier rather than a normal busy day.
-
For a single day, switch its Included toggle off to exclude it, or click Exclude All Anomalies to exclude every flagged day at once, then Confirm.
Step 2 — confirming a bulk exclusion of anomaly days -
Dashboard trends and totals now skip the excluded days. You can switch a day's toggle back on at any time to include it again.