add a checkbox, “DO NOT log as a defense+ event if this rule is fired.”
[attachment deleted by admin]