De-Duplicate Incidents Manually - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2023-11-02
Last date published
2024-02-28
Category
Administrator Guide
Abstract

De-duplicate incidents manually. Mark as duplicate in Cortex XSOAR.

You can manually de-duplicate incidents from the Incidents page.

  1. In the Incidents page, select the incident checkboxes that are duplicates.

  2. Click Mark as Duplicate.

  3. Type the ID of the incident that you want to retain.

  4. Click Validate.

  5. Click Close others as duplicate.

    The duplicated incident is removed from the table.