Incident states

Incidents can be in a few different states depending on how they are acted on.

An incident is created in Incident Response when a third-party monitoring tool has an event. Incidents can be manually or automatically assigned. Edit actions from the incident form using the state button in the header. Use the Save button in the form to keep any changes you've made. Changes to incidents in the list view are automatically saved.

Table 1. Incident states
State Description
Open State on incident creation.
Work in Progress Marks the incident as being worked on.
Resolved Marks the incident as fixed awaiting confirmation.

Incidents in the Resolved state are automatically closed after 3 days.

Closed Closes the incident.

To reopen an incident. Select Open.