Incident Management: Edit Incidents

Document created by RSA Information Design and Development on Jun 26, 2017Last modified by RSA Information Design and Development on Jul 27, 2017
Version 2Show Document
  • View in full screen mode
  

You can edit incidents in one of the following ways:

  • Edit an incident - Use this when you need to modify particulars of a single incident. 
  • Edit incidents in bulk - Use this when you have to modify a particular criteria for multiple incidents.

Edit an Incident

  1. In the Security Analytics menu, select Incidents > Queue.
  2. In the All Incidents view, select an incident.
  3. Click ic-edit.png.
    The Edit Incident dialog is displayed.
    edit_incident_dialog.png

Note: Alternatively you can select Edit Incident under the actions column for the selected incident.

  1. Modify the required values.
  2. Click Save.
    The edited incident is displayed in the All Incidents view.

Note: This procedure can be performed in a similar way in the My Incident view as well.

Edit Incidents in Bulk

  1. In the Security Analytics menu, select Incidents > Queue.
  2. In the All Incidents view, select 2 or more incidents.
  3. Click .

    The Edit Incidents dialog is displayed.

  4. Modify the required values.

    The values that can be modified in bulk are Priority, Status, Assignee, and Categories. If you select a checkbox, any modifications in the values for that field (including clearing the value) are applied for that field for all selected Incidents. If the checkbox is not selected, that field is unchanged for the selected Incidents.

  5. Click Save.

    The edited incidents are displayed in the All Incidents view.

Note: This procedure can be performed in a similar way in the My Incidents view as well.

Previous Topic:View Incident Details
You are here
Table of Contents > Incident Management Process Flow > Edit Incidents

Attachments

    Outcomes