Creating Incidents

This article describes the functionality for creating incidents: via an active action in the Job Scheduler and manually in the Incident Manager.

Creating via the "Create Incident" Active Action in the "Job Scheduler"

To create an incident using the Create Incident active action in the Job Scheduler, follow these steps:

1. Go to the Jobs List section (Main Menu - Job Scheduler - Jobs List)

2. Create a new job by clicking the Create button

3. Fill in the main job fields, including Name, Search Query, and Lock Duration. An example of job settings is shown below:

4. Add the Create Incident active action to the job and configure it. Information about configuring the main fields of the active action is provided in the section Create Incident. An example of setting up the Create Incident active action is shown in the image below:

5. Save the search job by clicking the Save button at the bottom or top of the interface

The incident created as a result of executing the job will be displayed in the Incident Manager.

Useful Information

Additional information about search jobs and active actions can be found in the section Job Scheduler.

---

Manual Creation

To create an incident manually, follow these steps:

1. Go to the Incident Manager

2. Click the Create Incident button. A modal window with incident parameters to fill out will appear:

The field set is configured in the Incident Card. By default, each incident includes the following list of fields:

Basic fields:

• Incident Name - the name of the incident displayed in the incidents list

• Incident Description - description that appears in the list when expanding the incident card

Required fields:

• Severity - the importance level of the incident

• Comment - explanatory comment for the incident

• Assignee - employee or group responsible for resolving the incident and its consequences

3. Click the Create Incident button. After clicking, the created incident will appear in the general list.