Forum Discussion
Default values for Sentinel incident selectors
Within the incidents view there is the option to select different values within the Severity, Status, Product Name and Owner fields for displaying incidents. Is it possible to define the default...
ts1120 As of right now, no. It has been requested that this feature be added to MS Sentinel although there is no indication that I know of, that MS has started to work (or will work) on it.
GaryBushey Thanks for the response Gary, hopefully this feature is deployed. It seems like a bit of an obvious feature to have within a SIEM to me.