Incidents are marked as HIGH severity when policy uses an AND condition in the policy, changing expected severity from INFO, LOW, or MEDIUM

Steps to reproduce:

1. Create a policy with at least one compound rule condition (keyword AND DI; EDM AND keyword; etc.)
2. Set default severity to 'medium'.
3. Add severity condition to set severity to 'High' when match count is greater than or equals '10'
4. Add a response rule which executes only if the severity is 'High'.

Note that the issue can prevent many Response Rules from being applied correctly.

Cause of the issue is that the compound condition causes the settings for severities to drop out from the incident summary, defaulting to the HIGH severity.

Upgrade to 15.1 MP1 or higher.