Splunk Enterprise Security

My Correlation Search doesn't trigger to Incident Review

zksvc
Contributor

I Have 60 Correlation Search in Content Management 

Some of my Correlation Search doesn't trigger to Incident Review but when i search it manually it show the result. No Suppression, No Throttling, and now i'm confused. 

Someone help me please

0 Karma
Get Updates on the Splunk Community!

Splunk New Course Releases for a Changing World

Every day, the world feels like it’s moving faster with new technological breakthroughs, AI innovation, and ...

Insights from .conf 2025, Smart Edge Processor Scaling, and a New Splunk Lantern ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Machine Learning - Assisted Adaptive Thresholding

Let’s talk thresholding. Have you set up static thresholds? Tired of static thresholds triggering false ...