Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Splunk Enterprise Security: Alert when a user attempts to assign an event to themselves that is already assigned to someone else

$
0
0
I've been searching and haven't found an answer to the following scenario, so I'm hoping someone else knows: In Enterprise Security, if 2 users click on a new notable event from the Security Posture screen, they both see the same unassigned notable event on the Incident Review screen. So, the first user assigns the event to themselves and begins working it. Then, the second user assigns the event to themselves, as they are unaware that the first user has already assigned the event to themselves. Is there any way for the second user to be warned about attempting to assign an event when the event is already assigned to someone else? Thanks.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>