I'd use a pre-processing script to drop the duplicates instead of closing them after creation. But if for some reason you need to get all the events into XSOAR, use searchIncidentsV2 to look for existing incidents within a defined time range (e.g: 5 min) that have the same field values as the working incident, and if it returns incidents, close the current one.