Skip to content
  • There are no suggestions because the search field is empty.

Add Events to an Incident Dialog

Add Events to an Incident Dialog

In the Add Events to an Incident dialog, analysts can add alerts to an existing incident so that incident responders look at the associated events as part of an incident response. To access this dialog while investigating a service in the Events view and the Legacy Events view, see Add Events to an Incident in the Events View and Add Events to an Incident in the Legacy Events View.

Workflow Workflow

netwitness_wkflow-createincdg.png

What do you want to do?

*You can perform this task in the current view.

Related Topics

Quick Look

The following figure is an example of the Add Events to an Incident dialog in the Legacy Events. The table describes the information and options in the Add Events to an Incident dialog .
netwitness_addev2incddg.png

The following figure is an example of the Add to Incident dialog in the Events view. The table describes the information and options in the Add to Incident dialog.

12.4_Add_events_mitre_0124.png