Unlinking alerts from incidents

You might need to unlink an alert from an incident, for example, if the alert analysis and investigation showed that the alert is not connected to other alerts in the incident. When you unlink an alert from an incident, Open Single Management Platform performs the following actions:

• Refreshes all of the data related to the incident, to reflect that the alert no longer belongs to the incident. For example, you can view the changes in the incident details.
• Resets the status of the unlinked alerts to New.

To unlink an alert from an incident:

1. Open the alert details.
2. Click the Unlink from incident button in the toolbar at the top.

   The Unlink alerts window opens.

3. If you want to change the assignee, select Assign the alerts to, and then specify the new assignee.
4. If you want to add a comment, specify it in the Comment section. The comment you specify will be displayed in the Details column in the History section.

The selected alerts are unlinked from the incident.