Converting an Alert to an Incident

Converting an Alert to an Incident

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security > SecMaster.
3. In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Management
   

4. In the navigation pane on the left, choose Threat Operations > Alerts.
   Figure 2 Alerts
   

5. In the alert list, locate the row that contains the target alert, click Convert to Incident in the Operation column. The Convert to Incident page is displayed on the right.
6. On the displayed page, set the Incident Type. Retain the default settings for other parameters.
   The incident name is automatically set to the name of the current alert and can be modified.

   Figure 3 Converting an alert to an incident
   

7. Click OK.