What is Infer alert, and how does it work? Where does the alert go?
Grabbed the definition from the documentation for clarity:
I have seen this used to make reporting simpler in the past, but there may be other use cases. Effectively, you are recategorizing an event. Hope this helps.
An easy way to understand is to edit the alert from the config event groups option This will show all the triggers that go into inferred alert for a better understanding of sources.
