Facing issue where notables are changing urgency post getting autoclosed

[bishtk]

Dear all,

Facing an issue wherein few notables urgency getting changed post getting autoclose. 
i refer to splunk docs and community answers so far and got to know that its expected behaviour of ES  IR and there is some correlation search or some adaptive action which recalculate the urgency as per urgency matrix. 
i need to know if you can please locate where can i find this “recalculate_urgency = true” parameter defined in order to modify it.

Thank you very much in advance 

[livehybrid]

Hi @bishtk 

Please could you give more info on where you got details on the recalculate_urgency parameter from? I do not recognise this, nor can I find it in my version of ES (8.1)

Which version of ES are you using? How are your notables being auto-closed?

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[bishtk]

Hi @livehybrid thanks .. that was the first reason i posted question here actually because i got that config info from chatbot and even I got confused. But in ES there is some search or adaptive response which checks the urgency even after it’s closed. And thats what I am trying to figure out.