diff --git a/pkg/database/alerts.go b/pkg/database/alerts.go index 1b1a4667e..78043c565 100644 --- a/pkg/database/alerts.go +++ b/pkg/database/alerts.go @@ -862,11 +862,7 @@ func AlertPredicatesFromFilter(filter map[string][]string) ([]predicate.Alert, e predicates = append(predicates, alert.HasDecisionsWith(decision.OriginEQ(value[0]))) case "include_capi": //allows to exclude one or more specific origins if value[0] == "false" { - predicates = append(predicates, alert.HasDecisionsWith( - decision.Or(decision.OriginEQ(types.CrowdSecOrigin), - decision.OriginEQ(types.CscliOrigin), - decision.OriginEQ(types.ConsoleOrigin), - decision.OriginEQ(types.CscliImportOrigin)))) + predicates = append(predicates, alert.Not(alert.HasDecisionsWith(decision.OriginEQ(types.CAPIOrigin)))) } else if value[0] != "true" { log.Errorf("Invalid bool '%s' for include_capi", value[0]) }