Incident States
There are various states an incident resides after an incident is created. The state defines the current state of the incident.
Starred - It is to store incidents like favorites so that a user can easily access incidents (more frequently used incidents).
To do - It is the first state of an incident that it will be in when an incident is created
Analyzing - It is the state where an incident is ingesting data from data-sources.
Review - Once the data analysis completed, the incident automatically moves to a Review state so that users can start working on the incident.
Failed - In case if the system comes across any issue during the analysis phase, the incident will be in the Failed state. The user needs to check and take corrective action on this incident or on the data analysis.
Archived - All the archived incidents reside here before they are purged and deleted by the defined purge configuration.
Throttled - During the creation of an incident, when there are more incidents created than defined in a particular time or if a job is taking more time to pull the relevant data while creating the incident, these incidents are moved into the Throttled state. The user needs to check and rerun the jobs so that the incident will move into To do -> Analyzing -> Review.
Last updated