This procedure is required when you have an alert with a particular criteria that fits an existing incident and you do not have to create a new incident.
To add an alert to an existing incident:
- In the Security Analytics menu, select Incidents > Alerts.
The All Alerts view is displayed.
- In the alert details view in the right-hand bottom half of the page, select one or more alerts that need to be added to an incident.
- Click .
The Add the selected Alerts to an Incident dialog is displayed.
All the incidents assigned to you that are still open are displayed. You can search within the dialog to narrow down the list.
- Select an incident from the list displayed to which the alert needs to be added.
- Click Add to Incident.
The selected alert or alerts are now part of the incident chosen and will have an incident ID.
Previous Topic:Create an Incident Manually
Next Topic:Delete Alerts
You are hereTable of Contents > Review Alerts > Add Alerts to an Existing Incident