Bulk Incident report close | Voters

Bulk Incident report close

Ian Hooper

I would like to request the option to bulk close out incident reports within the console.

April 14, 2023

Patrick Sofo [Security Product Manager]

Thanks for the feedback Ian! We have heard this one a few times and agree this could be convenient when an org/account has a bunch of similar incidents open at once.
We also are doing discovery on what a multi-host incident report might look like. That way these "similar incidents" would be grouped into one org-wide incident that could be remediated with one workflow cross hosts.
Do you have any thoughts on that idea?

Martin Twerski

Patrick Sofo [Security Product Manager]: That's a great idea as well, but I think for that to work we need a way to add an incident to a parent in bulk for any missed by any sort of automation you have.

Note: I am not the OP here.