Promote an alert to an incident

Promote an alert to an incident if you think the alert poses a serious issue and must be taken care of as soon as possible.

Before you begin

Role required: Responder, Manager, or Administrator

Procedure

  1. Log in to Lightstep Incident Response.
  2. On the left navigation pane, select Alerts.
  3. Promote an acknowledged alert from the Alerts list view.
    1. Select one or more alerts in the list by using the check box.
    2. Select Promote to Incident from the Actions menu.
      Promote an alert to an incident
    Note: The Actions menu become active once you select an alert.

    Only acknowledged alerts be promoted as long as they are not closed, the related alert of another alert, or already promoted to an incident.

    The incident is created and displayed with the alert listed under Related Alerts tab. Any attachments on the alert are copied over to the incident.