How can we stop duplicate notables which are getting generated in the Incident Review page for same event id in the Enterprise security . Do we need to adjust any settings ?
Time range Earliest = -70MLatest = -10M
Cron schedule : every 35 Minutes
It's happening for all correlation searches .