Create Incident

image\ebx_1343178832.gif

This action type create an incident whenever a correlated event fires. You can also initiate an iTRAC workflow process for remediating that incident. For more information about the values of the following parameters, refer to Incidents.

Caution: Do not enable the Create Incident action until the correlation rule has been tuned. If the rule fires frequently, the system may create more incidents or initiate more iTRAC workflow processes than desired.