KQL: Closing an incident if the events do not include entries in a Watchlist

Good day all.  I want to automatically close an incident if the events do not include entries in a watchlist.  I have another playbook that looks at entities and matches them with the entries...