Alert correlation

[MirzaSaquiB]

Can anyone help me in correlation

Alert A trigger and creates the incident.

Alert B triggered and correlate with Alert B 

Due to which Alert C group alert is created which is also created the incident.

But only 1 incident should be triggered. Is there a way to resolve thid issue.

[jennifermetz1]

Its hard to tell you the exact method without knowing more information about what type of data you are trying to correlate and what information is available and linked with each alert. Here are the use cases for reference.

You most likely could use rule based alert grouping. You would setup rules for a primary alert and secondary alerts. This is how you create an alert correlation rule. And this is additional information for filling out the alert correlation rule form.

Here is a great post on leveraging alert correlation and grouping for noise reduction.