risk notable

risk notable


Events that are automatically generated based on correlation searches or risk rules that associate risk scores with an entity, such as an asset, identity, user, or device. As opposed to a notable event, a risk notable always has a risk score assigned to it.

Related terms

For more information

In Use Splunk Enterprise Security Risk-based Alerting: