You provision Azure Sentinel for a new Azure subscription.
You are configuring the Security Events connector.
While creating a new rule from a template in the connector, you decide to generate a new alert for every event.
You create the following rule query.
By which two components can you group alerts into incidents? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Question

You provision Azure Sentinel for a new Azure subscription.

You are configuring the Security Events connector.

While creating a new rule from a template in the connector, you decide to generate a new alert for every event.

You create the following rule query.

By which two components can you group alerts into incidents? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Krishna chaithanya · Accepted Answer

<div style="font-size:12pt;font-family:Calibri, sans-serif;"><p style="margin:0;"> IP address</p></div>

Krishna chaithanya · Accepted Answer

<div style="font-size:12pt;font-family:Calibri, sans-serif;"><p style="margin:0;"> computer</p></div>

Krishna chaithanya · Answer

Krishna chaithanya · Answer

resource group

List of questions