investigation status

investigation status

noun

A way to track the progress of an investigation in Splunk Enterprise Security. You can create new statuses, restrict transitions between statuses, and set default statuses for new investigations.

For more information

In Administer Splunk Enterprise Security:

• Manage and customize investigation statuses in Splunk Enterprise Security