Changing an incident priority

As a work item, an incident has a priority that defines the order in which the incident must be investigated by analysts. You can change the incident priority manually.

You can change incident priorities of your own incidents or incidents of other analysts only if you have the access right to read and modify alerts and incidents.

An incident can have one of the following priorities:

• Low
• Medium (default value)
• High
• Critical

Incidents with the Critical priority are the most urgent ones and must be investigated first. The Low priority usually means that the incident is placed in the backlog. You can define your own criteria as to which priority should be set to which incident.

To change an incident priority:

1. In the main menu, go to Monitoring & reporting → Incidents.
2. Do one of the following:
   • Select the check boxes next to the incidents whose priority you want to change.
   • Click the incident ID to open the details of the incident whose priority you want to change.
3. Click the Change priority button.
4. In the Change priority window, select the priority to set.
5. Click the Save button.

The priority of the selected incidents is changed.