To perform this function you must have user permissions to Modify Incident(s) and Add to existing Incident(s).
In a Real Time Event Table or a Snapshot, select an event or a group of events and right-click.
.In the Add Events To Incident dialog box, click
to list the available incidents.The Select Incident window displays.
Click
to view a list of incidents with the selected criteria.You can define your criteria to search for a particular incident or incidents in Select Incident window.
Select an incident and click
.Click
. The event or events selected are added to the incident in the Incidents Navigator.If events are not initially displayed in a newly created incident, it is probably because of a lag in the time between displaying in the Real Time Events window and insertion into the database. If this occurs, it takes a few minutes for the original events to be inserted into the database and display in the incident.