https://community.splunk.com/t5/Splunk-Enterprise-Security/Alert-setup/m-p/541386#M9734 <P>Hi All,</P><P>I have a correlation search created where an alert unique ID is generated.</P><P>That alert id is then used in Episode review which inturn will be used to raise incident.</P><P>Somehow the alert ID is not getting ingested in Episode review.</P><P>Recently the index name for correlation was changed, will that affect anything ?</P><P>Please help</P><P>Thanks &amp; Regards</P><P>Sumeet Firodia</P> Thu, 25 Feb 2021 17:09:12 GMT sfirodia 2021-02-25T17:09:12Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Alert-setup/m-p/541386#M9734 <P>Hi All,</P><P>I have a correlation search created where an alert unique ID is generated.</P><P>That alert id is then used in Episode review which inturn will be used to raise incident.</P><P>Somehow the alert ID is not getting ingested in Episode review.</P><P>Recently the index name for correlation was changed, will that affect anything ?</P><P>Please help</P><P>Thanks &amp; Regards</P><P>Sumeet Firodia</P> Thu, 25 Feb 2021 17:09:12 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Alert-setup/m-p/541386#M9734 sfirodia 2021-02-25T17:09:12Z