risk rule

risk rule

noun

A correlation search that adds events to the risk index using the risk analysis adaptive response action.

Related terms

• risk incident rule

For more information

In Use Splunk Enterprise Security Risk-based Alerting:

• How to create risk notables using Splunk Enterprise Security
• How risk-based alerting works in Splunk Enterprise Security