フリー問題

問題文

An automation rule does not run when incidents are created. Which cause is most likely?

選択肢

1. Automation rules cannot be triggered by incident creation and must instead be triggered by an update to an existing incident.
2. The rule's trigger or conditions do not match the incidents in question, or another rule earlier in the order changed the incident so that the conditions no longer apply.
3. Automation rules run only once per day in a batch, so a rule created today will not act on incidents until the next scheduled run. Rules created after the batch has already run are queued until then, so the incidents raised today appear untouched.
4. Automation rules require Microsoft Sentinel Reader on the workspace.