Forum Discussion

Sidra_Raza's avatar
Sidra_Raza
Brass Contributor
Sep 07, 2023

Entities missing in Incidents

Hello, Entities are not showing on any of the incidents in Sentinel. Although, I have mapped the entities correctly for each alert.    I have the same alerts and entities mapping on other te...
Alerts
integration
siem
UEBA
  • Sidra_Raza's avatar
    Sidra_Raza
    Brass Contributor
    Sep 07, 2023
    It's enabled already but no luck.
    • eliekarkafy's avatar
      eliekarkafy
      MVP
      Sep 07, 2023

      Sidra_Raza for this analytic rule the entity mapping should look like the below 

       

      • Sidra_Raza's avatar
        Sidra_Raza
        Brass Contributor
        Sep 09, 2023
        I did the same mappings

Resources