incident

incident

noun

An event generated by a correlation search as a security alert in Splunk Mission Control. Comparable to a notable event in Splunk Enterprise Security (Cloud), an incident is an item that you can investigate. As an example, it might include an email from a phishing inbox.

Related terms

• event
• artifact
• response plan

For more information

In Investigate and Respond to Threats in Splunk Mission Control:

• Create an incident in Splunk Mission Control