|Applies To||RSA Product Set: NetWitness Logs & Network|
RSA Version/Condition: 11.x
O/S Version: 7
|Issue||All incidents name appears with <Incident Rule> for <Source IP Address> details by default. (shown below)|
This is due to Group by value set "Source IP Address" as default parameter in Incident Rules.
|Resolution||Please follow below steps to get Incident Name with ESA alert title.|