Close an Incident Response incident

Close an incident, if you think it is not an issue, or if it has already been handled.

Before you begin

Role required: Responder, Manager, or Administrator

Procedure

  1. Log in to Incident Response.
  2. On the left navigation pane, click Incidents.
  3. Open the incident you want to close.
  4. Click Close.
    Closed incidents remain in the Incidents list view.
    Note: When you close an incident, all alerts belonging to it are closed.

    If you resolve an incident, the alerts remain open until you close the incident.

    Incidents in the Resolved state are automatically closed after 3 days.