Thank you for the response. However, this doesn't appear to be a timing/refresh issue in our case. Additional Details: This inconsistency is affecting approximately 10 notable events simultaneously The status mismatch persists even after manually refreshing the Incident Review page All affected events consistently show "New" in the list view but "In Progress" when accessing the detail view This behavior is reproducible and consistent across multiple page refreshes and different user sessions
... View more
I'm experiencing a status synchronization issue in Splunk Enterprise Security 8.3.2 where the notable event status displays differently between the incident list and the detailed event view. Issue Details: In the Incident Review list, the event shows status as "New" When navigating to the details of the same event, the status displays as "In Progress" This creates confusion regarding the actual current status of the event
... View more