Removing Failures from Phishing Test Results

The below instructions will explain how to remove failures from your phishing tests. Removing failures cannot be reversed. After removing a failure, it may take up to 15 minutes to update your reports. 

The following types of Phishing Failures can be removed:

• Clicks
• Attachment opens
• Replies
• Reply Content
• Macros enabled
• Data entry

Email opens are not considered a failure on a phishing test and do not contribute to a user's Phish-prone percentage.

There are two ways to remove Phishing Test Failures: From the Phishing Campaign Report and From the User Timeline.

Method #1: Remove Failure from the Phishing Campaign Report

1. Log in to your KnowBe4 admin account.
2. Click the Phishing tab. 
3. From the Campaigns tab, you will see a list of your phishing campaigns. Click the name of the Campaign where you'd like to remove failures.
   
4. Click the Users tab beneath that Phishing Campaign to view all data associated with the campaign.
   
5. Click on the column header for the type of failure you'd like to remove (Clicked, Replied, Attachment Open, etc.).
   
6. When the list of users who failed appears, you will see a "trash" icon to the right of their name. Click the "trash" icon to remove that failure.
   Note: For "Replied" failures, to delete the content of the user's reply without deleting the Replied failure, click the red arrow to view the reply content, then click Delete Reply Content. 
   
7. You will be prompted to confirm your action. Remember that removing a failure cannot be reversed.
   
8. Once confirmed, the failure will be removed. All failure removals will be recorded on the associated user profiles, within the user's timeline.
   

Back to Top

Method #2: Remove Failure From the Affected User's Timeline 

1. Log in to your KnowBe4 admin account.
2. Go to the Users tab. 
3. From the list on the Users subtab, find the affected user. 
4. Click the user's name or email address to go to their User Profile.
5. Click on their User Timeline tab. 
   
6. Find the Phishing Failure you would like to remove.
   • We recommend using the Event Type or Date Range drop-down menus to quickly find the event you are looking for.
7. Once you have found the event you would like to remove, click the trash can icon next to that event.
8. You will be prompted to confirm your action. Remember that removing a failure cannot be reversed.
   
9. After you click Confirm, the failure will be removed and the removal will be recorded on the user's timeline.

Back to Top