Manage queue priority

Add a new queue

Set the priority order for queues. If a finding matches the conditions for multiple queues, it goes to the one with the highest priority. Each finding belongs to only one queue.

  1. In Splunk Enterprise Security, select Configure and then Findings and investigations.
  2. Select Team queues.
  3. Select Manage queue priority.
  4. Use the move icon ( ) to drag and drop queues in your preferred order.
    You can select the expand icon ( ) to see the conditions and roles with visibility for each queue.
  5. Select Save.