Assigning User to an Incident

Introduction

This article describes how to assign an incident to a user by changing its owner.

User Assignment

The person responsible for the incident is expected to resolve it, conduct necessary investigations through incident cards, and take necessary actions when required.

New incidents are created with LogsignBot as the owner. The user responsible for the incident (Owner) can be changed while the incident is open. Once the owner is changed, the new user is shown as the Owner of the incident on the Incidents page.

1.png

In the screenshot above, the incident owner is the admin user.

To change the owner of a single incident, open the incident (on the Incidents page, select the incident and click More), click the owner avatar in the incident header and pick a user from the Owner list. Only local users are listed, and the owner cannot be changed after the incident is closed.

2.png

3.png

To assign several incidents at once, select them on the Incidents page and click Assign. In the Assign User window, choose a user from User List and click Save.

Was this article helpful?
0 out of 0 found this helpful

Articles in this section

See more
Become a Certified Logsign User/Administrator
Sign-up for Logsign Academy and take the courses to learn about Logsign USO Platform in detail. Enjoy the courses, and get your badges and certificates. In these courses, you'll learn how to use Logsign in your work and add value to your career.
Visit Our Blog
Our Logsign USO Platform illustrate our expertise. So do the blog. Through our blog posts, deepen your knowledge on various SecOps topics or get updated about important news & modern approaches for cybersecurity. Get into the habit of reading valuable information provided by Logsign. Be a step ahead.