Palo_Alto_Networks
XSIAM-ENGINEER · Question #63
What should be considered when creating a custom incident domain?
The correct answer is B. Alert grouping will apply, but SmartScore will not. When creating a custom incident domain in Cortex XSIAM, alert grouping still applies, allowing related alerts to be combined into incidents. However, SmartScore is not applied, since it is reserved for predefined domains.
Incident Management
Question
What should be considered when creating a custom incident domain?
Options
- AAlert grouping will not apply, but SmartScore will.
- BAlert grouping will apply, but SmartScore will not.
- CAlert grouping and SmartScore will not be applied to incidents.
- DAlert grouping and SmartScore will be applied to incidents.
How the community answered
(64 responses)- A5% (3)
- B81% (52)
- C3% (2)
- D11% (7)
Explanation
When creating a custom incident domain in Cortex XSIAM, alert grouping still applies, allowing related alerts to be combined into incidents. However, SmartScore is not applied, since it is reserved for predefined domains.
Topics
#custom incident domain#alert grouping#SmartScore#incident configuration
Community Discussion
No community discussion yet for this question.