Duplicate TAA incidents are getting created

book

Article ID: 192035

calendar_today

Updated On:

Products

Endpoint Detection and Response Endpoint Security Complete

Issue/Introduction

Duplicate TAA incidents are getting created.

Cause

The TAA incidents are not duplicates. Incident handler received 2 separate incidents from TAA. The event_ids across incidents are the same, however the incident_ids are different and hence treated as separate incidents.

Resolution

BROADCOM Engineering will resolve this via back end server changes.