Skip to content

Present new detections for approval

  1. Go to Content Hub, Proposals.
  2. Click Add to pack on the detections you want to put forward.
  3. In the meeting, click Present the decision pack.
  4. Record each decision with the approver's name. Approved detections are saved in Splunk switched off, ready to test.