Manually De-Duplicate Incidents - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2024-02-14
Last date published
2024-04-25
Category
Administrator Guide
Solution
Cloud
Abstract

De-duplicate incidents manually. Mark as duplicate in Cortex XSOAR.

You can manually de-duplicate incidents from the Incidents page.

  1. Select the incident checkboxes that are duplicates.

  2. Click Mark as Duplicate.

  3. Type the ID of the incident that you want to retain.

  4. Click Validate.

  5. Click Close others as duplicate.

    The duplicated incident is removed from the table.