Preprocessing rule "Link and Close" category Rule configured

assubramania — Tue, 25 Jun 2024 02:04:42 GMT

Hi Team,

Preprocessing rule "Link and Close" category Rule configured : Link to oldest incident Created within the last 5 Minutes Issues on the preprocessing rule : 1. 2 incidents are created at the same time, both are closed . None of them has open incident and other one as linked incident 2. For the one's that are linked, they are not accessible. 3. In the same time interval it creates 4 different incidents , and the active one will have only 2 as linked incidents and rest of the 2 are not been taken into account. The time different is in seconds between the incidents.

Re: Preprocessing rule "Link and Close" category Rule configured

AbelSantamarina — Wed, 03 Jul 2024 18:23:13 GMT

Hello @assubramania,

Can you please share a screenshot here of how the preprocessing rule is configured?
Also, how are you pulling these incidents? What integration is ingesting them?
Thank you.

topic Preprocessing rule "Link and Close" category Rule configured in Cortex XSOAR Discussions

Preprocessing rule "Link and Close" category Rule configured

Re: Preprocessing rule "Link and Close" category Rule configured