Splunk Enterprise Security

How can I set up an email notification when an incident is assigned

nareerat_pr
Explorer

How can I set up an email alert to notify someone who is assigned the incident from the incident review page?

0 Karma
1 Solution

thambisetty
Super Champion

have a look at below thread

https://community.splunk.com/t5/Splunk-Enterprise-Security/KV-Store-Lookup-to-Email-with-timestamp-s...

————————————
If this helps, give a like below.

View solution in original post

0 Karma

thambisetty
Super Champion

have a look at below thread

https://community.splunk.com/t5/Splunk-Enterprise-Security/KV-Store-Lookup-to-Email-with-timestamp-s...

————————————
If this helps, give a like below.
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!