How to Mark ES incident or alert as True/False Pos...

Alerting

Hi Team,

Requirement : ES incident/Alerts should be mark as True Positive or False Positive as verdict .

Please help how I can fulfill this requirement,.

Is there any custom field configuration or any drop down list can be configured ?

Get Updates on the Splunk Community!

We’ve discovered a bug that affected the auto-clear of Synthetic Detectors in the Splunk Synthetic Monitoring ...

Remember Splunk Community member Tom Kopchak? If you caught the first episode of our Smartness interview ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud? Learn how unique features like ...

How to Mark ES incident or alert as True/False Positive in Splunk cloud