Manually create Incident Response tags

Incident Response imports tags and attaches them to alerts and incidents. However, you can also create tags manually.

Before you begin

Role required: Responder, Manager, Stakeholder, or Administrator

There are three ways that tags can enter the system and attach to an alert or incident. The two are automated but the last one is manual.

Imported from a third-party integration such as Datadog.
Added using the Modify field values action in a response rule.
See, Create a response rule for more information.
Using the Alerts or Incidents tag icon in the header.

Log in to Lightstep Incident Response.
In the left navigation pane, click Alerts or Incidents.
Open an alert or incident.
In the header, click the tag icon .
Enter your tag in the pop-up window.
Your tag is saved and appears below the line along with any other tags already applied. Tags can be used in response and grouping rules.
Click anywhere in the alert or incident form to close the pop-up.

Note: Adding tags to an alert is not considered an update, so no rules run when you add a tag.