November 4, 2026
© 2026 SOC Prime Inc.
All rights reserved. This product and documentation related are protected by copyright and distributed under licenses restricting their use, copying, distribution, and decompilation. No part of this product or documentation related may be reproduced in any form or by any means without the prior written authorization of SOC Prime. While every precaution has been taken in the preparation of this book, SOC Prime assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice.
Matching Pipelines: Severity Filtering for Tagged Events
You can now choose which tagged events are saved to a Destination Topic based on the severity of the detection rules they matched. To set it up, create or edit Matching Pipeline, select Tagged under Save Events, and pick the levels you want from the new Severity dropdown: Critical, High, Medium, Low, or Informational (All by default).
WHY
Send only high-priority detections to your destinations to reduce storage costs and stay focused on the threats that matter most.
