De-Duplicate Incidents Manually - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2024-09-18
Last date published
2024-11-28
Category
Administrator Guide
Solution
Cloud
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation
Abstract

De-duplicate incidents manually. Mark as duplicate in Cortex XSOAR.

You can manually de-duplicate incidents from the Incidents page.

  1. In the Incidents page, select the incident checkboxes that are duplicates.

  2. Click Mark as Duplicate.

  3. Type the ID of the incident that you want to retain.

  4. Click Validate.

  5. Click Close others as duplicate.

    The duplicated incident is removed from the table.