What is the default configuration for indicator auto-extraction when incidents are created?
What is the default configuration for indicator auto-extraction when incidents are created?
The default configuration for indicator auto-extraction when incidents are created is Inline. This means that indicators are extracted automatically and immediately during the creation of incidents, without requiring separate processing steps.
This settings is found here >>> Under Settings >> Object Setup >> Types >> Edit a custom Type or Duplicate an existing one. Then under Indicators Extraction Rules you can select Use System default (inline), None, Inline or Out of Band