Abstract
Create an incident starring configuration that categorizes and stars incidents when alerts contain attributes that you decide are important.
To help you focus on the incidents that matter most, you can star an incident. Cortex Xpanse identifies starred incidents with a star icon. You can then sort or filter the Incidents table on starred incidents. You can also choose whether to display all incidents or only starred incidents on the Incident Management Dashboard.
Star a Specific Incident
To manually star an incident during or after investigation:
Select → .
From the Incident List, locate the incident you want to star.
Select the star icon, or right click on the incident and select Star Incident.