Manually create Incident Response tags

Tags help you classify and categorize data, or otherwise add information there isn't a field for. Incident Response imports tags and attaches them to alerts and incidents. However, you can also create tags manually.

Before you begin

Role required: Responder, Manager, Stakeholder, or Administrator

About this task

There are three ways that tags can enter the system and attach to an alert or incident. The two are automated but the last one is manual.
  • Imported from a third-party integration such as Datadog.
  • Added using the Modify field values action in a response rule.

    See, Create a response rule for more information.

  • Using the Alerts or Incidents tag icon in the header.

Procedure

  1. Log in to Lightstep Incident Response.
  2. In the left navigation pane, select Alerts or Incidents.
  3. Open an alert or incident.
  4. In the header, use the tag icon Tag icon to add tags.
  5. Enter your tag in the pop-up window. Tags pop-up window
    Your tag is saved and appears below the line along with any other tags already applied. Tags can be used in response and grouping rules.
  6. Select anywhere in the alert or incident form to close the pop-up.
    Note:

    Adding tags to an alert is not considered an update, so no rules run when you add a tag.

    Tags are also shown under the description in the alert and incident list views.