Manually create an incident

Create an incident if you think an issue poses a serious risk and should be taken care of as soon as possible.

Before you begin

Role required: Responder, Manager, or Administrator

About this task

Only the Short Description field is required.


  1. Log in to Lightstep Incident Response.
  2. On the left navigation pane, select Incidents.
  3. Select Create new incident.
  4. Fill in the fields on the pop-up form, as appropriate.
    Table 1. Field mapping
    Field Description
    Short Description Add abbreviated description of the incident.
    Description Add full description of the incident.
    Service Select a service associated with the incident.
    Priority Select the priority for the incident. Choices are:
    • P1 - Critical
    • P2 - High
    • P3 - Moderate
    • P4 - Low
    • P5 - Informational (default)
    Assigned team Select a team to work on the incident.
    State Choose a state for the incident. Choices are:
    • Open (default)
    • Work in progress
    • Resolved
    • Closed

    See Incident states for more information.

    Assigned to Assign an individual to work on the incident.
    Opened by You.
  5. Select Create.
    The incident is created and the new form displayed.
  6. Add any Supporting teams to the incident if desired.
    If a primary on-call responder for that team is present, they are added to the Responder list in the Collaboration panel.
  7. Add any work notes in the Compose panel.
  8. Add an attachment related to the incident in the Attachments panel. Attachment icon using the Browse button.
  9. Start or join a Zoom meeting, Microsoft Teams, or Slack channel in the Collaboration panel.Collaboration icon.
  10. Add any additional Responders or Stakeholders using the add icon Alt text for icon-add.png.
    You can send email updates to stakeholders to keep them informed using the Generate new update button on the Stakeholders tab.
  11. Select Save.
    The incident appears with comments, work notes, and incident activity captured in the Incident timeline stream. For more information on incident fields, see Incident workspace.