risk notable

risk notable

noun

A type of notable event that contains a risk score. Risk notables are automatically created when a risk incident rule associates a risk score with a risk object, such as an asset, identity, user, or device.

Related terms

• incident
• observable
• artifact
• notable event

For more information

In Use Splunk Enterprise Security Risk-based Alerting:

• Risk notables in Splunk Enterprise Security