Manually create Incident Response tags

Incident Response imports tags and attaches them to alerts and incidents. However, you can also create tags manually.

Before you begin

Role required: Responder, Manager, Stakeholder, or Administrator

About this task

There are three ways that tags can enter the system and attach to an alert or incident. The two are automated but the last one is manual.
  • Imported from a third-party integration.
  • Added using the Modify field values action in a response rule.

    See, Create a response rule for more information.

  • Using the Alerts or Incidents tag icon in the header.

Procedure

  1. Log in to Incident Response.
  2. In the left navigation pane, click Alerts or Incidents.
  3. Open an alert or incident.
  4. In the header, click the tag icon Tag icon.
  5. Enter your tag in the pop-up window. Tags pop-up window
    Your tag is saved and appears below the line along with any other tags already applied.
  6. Click anywhere in the alert or incident form to close the pop-up.
    Note: Adding tags to an alert is not considered an update, so no rules run when you add a tag.