{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44477,"path":"security-management/security-incident-response/disable-auto-alarm-logrhythm.md","title":"Disable automated alarm closure for LogRhythm","bundle":null,"doc_type":null,"release":"australia","body":"\n# Disable automated alarm closure for LogRhythm\n\nDisable the automated alarm closure capability if you no longer want to view the security incident closure information on the LogRhythm Web Console. Once deactivated, the ServiceNow AI Platform no longer closes alarms within the LogRhythm Web Console. This process is optional.\n\n## Before you begin\n\nRole required: sn\\_si.admin\n\n## About this task\n\nOnce disabled, the status notes and other closure information on the security incident are no longer displayed on the LogRhythm Web Console.\n\n## Procedure\n\n1.  Navigate to **All** > **System definition** > **Business Rules** and select the **Business Rules** module.\n\n2.  If not displayed in the **Business Rules** list, enter **LogRhythm Close Alarm On SI Closure** in the search field and press **Enter**.\n\n    \\[Omitted image \"lr-bus-list-search.png\"\\] Alt text: Business rule highlighted in search field.\n\n3.  In the **Name** column, click the **LogRhythm Close Alarm On SI Closure** link to open the record.\n\n4.  In the record that is displayed, clear the **Active** check box.\n\n5.  Click **Update**.\n\n    The automated alarm closure capability is now disabled.\n\n\n**Parent Topic:**[Additional configurations for the LogRhythm integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/configure-system-and-troubleshooting-properties.md)\n\n"}}