Objective 

Steps to follow 

• Navigate to the Alerts Tab > Alerts.
• Select the checkbox next to the alert(s) you wish to include in an incident. You can select multiple alerts if needed.
• Use the filter option to filter the alert(s) based on the specific criteria that you want to associate with an incident.  

• Once selected, click the "Add to Incident" button at the top of the alert list.
• In the pop-up that appears, choose one of the following:
• Existing Incident(s): To link the alert(s) to an existing incident.
• Add New Incident: To create a new incident and associate the alert(s).
• Provide necessary details such as Incident Name, Description, Assignee, Severity, Status, Due Date, and Notes if needed (if creating a new incident).
• Click Create to complete the action.

• Navigate to the Alerts tab > Incident to view the incident details.
• You can also navigate to the Incident Overview tab under the Dashboard. This section offers a centralized view of all incidents, giving clear insights into active, overdue, and recent incidents. It enables teams to monitor efficiently and manage incident activity.

Tips 

Steps to Create an Incident Rule

1. Navigate to the Alerts Tab → Incident → Incident Rule → + Add Incident Rule.
2. Provide a name and a description for the incident rule.
3. Assign the incident to an admin or a technician using the Assign To drop-down menu.
4. Choose the appropriate Severity level: Attention, Critical, or Trouble.
5. Specify the threshold value—an incident will be generated when the defined number of alerts is triggered within the set time window.
6. In the Criteria section, define the conditions based on Device, Device Group, or Alert Profile. You can add multiple fields using the + icon, and combine conditions using AND/OR logical operators.
7. Click Save to finalize the incident rule.

Steps to Enable Workflow for an Alert Profile

1. Navigate to the Alerts tab > Alerts.
2. Click on Manage Alert Profiles.
3. Search and locate the alert profile for which you want to enable the workflow.
4. Hover your cursor over the desired alert profile name and click on the update icon that appears next to it.
5. In the alert profile configuration screen, Click on Workflow
6. Enable the checkbox labeled Enable Workflow.
7. From the dropdown, select the workflow you want to associate with this alert profile. you can select the predefined workflow or you can create a custom workflow by clicking on Add New Workflow.
8. Click update to apply the changes.

 Related topics and articles 

1. Help Guide: Incident management
2. Help Guide: Steps to map search results as incidents
   
3. Help Guide: Steps to map reports as incidents
   
4. Help Guide: Incident workflow management