risk notable

risk notable


A type of notable event that contains a risk score. Risk notables are automatically created when a risk incident rule associates a risk score with a risk object, such as an asset, identity, user, or device.

Related terms

For more information

In Use Splunk Enterprise Security Risk-based Alerting: