A support agent resolves an incident associated with an alert, but the alert does automatically close even though the evt_mgmt.incident_closes_alert property is set appropriately to close the alert.
What is the most likely cause of this issue?

Question

A support agent resolves an incident associated with an alert, but the alert does automatically close even though the evt_mgmt.incident_closes_alert property is set appropriately to close the alert.

What is the most likely cause of this issue?

Ryan John Ricafranca · Accepted Answer

The support agent does not have the evt_mgmt_user role.

Ryan John Ricafranca · Answer

The support agent only has the evt_mgmt_admin role.

Ryan John Ricafranca · Answer

The support agent has the evt_mgmt_operator role, but not the evt_mgmt_user role.

Ryan John Ricafranca · Answer

The support agent has the evt_mgmt_user role, but not the evt_mgmt_operator role.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 18 - CIS-EM discussion

Suggested answer: A

0 comments