topic Re: Duplicate Notable Events in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/Duplicate-Notable-Events/m-p/541105#M9727 <P>Do you have a screenshot? Are they created on the notable index at the same time? For some of the searches, what are the triggered actions configured? Any way a series of daisy chained triggered actions leads to another notable being created?</P> Wed, 24 Feb 2021 04:15:17 GMT sbaileigh 2021-02-24T04:15:17Z Duplicate Notable Events https://community.splunk.com/t5/Splunk-Enterprise-Security/Duplicate-Notable-Events/m-p/538382#M9673 <P>On Splunk 7.3.1.1 and now suddenly out of nowhere this issue popped up, the notable alerts are being duplicated for almost 80% of my co relation searches, when i check the raw events for those duplicates they're exactly same, so no question of duplicity of actual logs, but only for the notable alerts that are generated in Incident Review Dashboard of Enterprise Security.</P><P>Does anyone faced this issue or have resolved it?</P><P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/1406">@woodcock</a>&nbsp;</P> Wed, 03 Feb 2021 07:17:47 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Duplicate-Notable-Events/m-p/538382#M9673 warsaw 2021-02-03T07:17:47Z Re: Duplicate Notable Events https://community.splunk.com/t5/Splunk-Enterprise-Security/Duplicate-Notable-Events/m-p/538876#M9685 <P>Facing same issue&nbsp; since 3 weeks.</P> Sun, 07 Feb 2021 06:20:14 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Duplicate-Notable-Events/m-p/538876#M9685 fmohmand 2021-02-07T06:20:14Z Re: Duplicate Notable Events https://community.splunk.com/t5/Splunk-Enterprise-Security/Duplicate-Notable-Events/m-p/541105#M9727 <P>Do you have a screenshot? Are they created on the notable index at the same time? For some of the searches, what are the triggered actions configured? Any way a series of daisy chained triggered actions leads to another notable being created?</P> Wed, 24 Feb 2021 04:15:17 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Duplicate-Notable-Events/m-p/541105#M9727 sbaileigh 2021-02-24T04:15:17Z Re: Duplicate Notable Events https://community.splunk.com/t5/Splunk-Enterprise-Security/Duplicate-Notable-Events/m-p/546234#M9843 <P>Seeing the same issue, any solution?</P> Wed, 31 Mar 2021 14:44:55 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Duplicate-Notable-Events/m-p/546234#M9843 Vijeta 2021-03-31T14:44:55Z