This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Log in to ask a question
Announcements
Webinar May 14th: Gemini's generative AI within Google SecOps
Webinar May 29th: Log Ingestion: Bindplane + Google SecOps
Log in to ask a question

Alert Grouping by Entities is broken

Posted on 01-31-2025 11:06 AM
mccrilb
Silver 1
Silver 1
Reply posted on --/--/---- --:-- AM

Our alerts have stopped grouping. When I review the group rules all the entities values are blank, if I try to re-add and save them they do not save. 

Is anyone else seeing this? 

 

0 3 155
Topic Labels
0 Likes
3 REPLIES 3

Posted on --/--/---- --:-- AM
matthewnichols
Staff
Reply posted on --/--/---- --:-- AM

Hi @mccrilb this might be a case that you would need to submit to support. 

0 Likes

Posted on --/--/---- --:-- AM
SoarAndy
Staff
Reply posted on --/--/---- --:-- AM

 

Just to check, the OOTB alert grouping is a simple rule with no values in

SoarAndy_0-1738944555094.png

 

0 Likes

Posted on --/--/---- --:-- AM
mccrilb
Silver 1
Silver 1
Reply posted on --/--/---- --:-- AM

After the last weekly patching the issue was corrected. 

0 Likes
Top Solution Authors
View all