Docs » Respond to and manage incidents

Edit this page
Learn how

---

Respond to and manage incidents

Incidents are automatically triggered after you configure your incident policies to route and group alerts and add an incident workflow to your incident policy. Go to the Incidents tab in Incident Intelligence to view incidents as they are triggered.

Search for incidents

You can search for incidents by ID or title. Searching by ID supports partial matching. Searching by title requires whole-word matching.

Manually create an incident

You can manually create an incident using the Create incident button on the Incidents tab. Manually created incidents trigger the incident workflow for the incident policy you select.

Use the following topics to learn about incident management and response:

• Respond to an incident: Acknowledge, resolve, or dismiss an incident

• Snooze an incident

• Add responders and assign roles

• Add collaboration tools and resources to an incident

• Create ServiceNow tickets within Splunk Incident Intelligence incidents

• Edit an incident

• What is a muted incident?

• Review mean time to acknowledge and respond and other incident response stats

---

• API docs
• Blog
• Training
• Free Trial